CVE-2008-1924

2008-04-23T16:05:00
ID CVE-2008-1924
Type cve
Reporter cve@mitre.org
Modified 2017-08-08T01:30:00

Description

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.