phpMyAdmin 2.x - 'Export.php' File Disclosure
| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | phpMyAdmin < 2.5.6-rc1 Arbitrary File Access | 22 Nov 200400:00 | – | nessus |
| FreeBSD : file disclosure in phpMyAdmin (141) | 6 Jul 200400:00 | – | nessus |
| FreeBSD : file disclosure in phpMyAdmin (cc0fb686-6550-11d8-80e3-0020ed76ef5a) | 23 Apr 200900:00 | – | nessus |
| phpMyAdmin export.php what Parameter Traversal Arbitrary File Access | 3 Feb 200400:00 | – | nessus |
 | file disclosure in phpMyAdmin | 17 Feb 200400:00 | – | freebsd |
 | CVE-2004-0129 | 1 Sep 200404:00 | – | cve |
 | CVE-2004-0129 | 1 Sep 200404:00 | – | cvelist |
 | CVE-2004-0129 | 1 Sep 200404:00 | – | debiancve |
 | CVE-2004-0129 | 3 Mar 200405:00 | – | nvd |
 | FreeBSD Ports: phpMyAdmin | 4 Sep 200800:00 | – | openvas |
10
source: https://www.securityfocus.com/bid/9564/info
phpMyAdmin is prone to a vulnerability that may permit remote attackers to gain access to files that are readable by the hosting web server. The issue is reported to exist in the 'export.php' script and may be exploited by providing directory traversal sequences as an argument for a specific URI parameter.
http://www.example.com/[phpMyAdmin_directory]/export.php?what=../../../../../../etc/passwd%00Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Dec 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.09332