phpMyAdmin Local file exposure through symlinks with UploadDir

🗓️ 17 May 2022 02:37:25Reported by GitHub Advisory DatabaseType

phpMyAdmin symlink local file exposur

Reporter	Title	Published	Views	Family All 41
Tenable Nessus	phpMyAdmin 4.0.10.x < 4.0.10.17 / 4.4.15.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities	30 Aug 201600:00	–	nessus
Tenable Nessus	Debian DLA-1821-1 : phpmyadmin security update	18 Jun 201900:00	–	nessus
Tenable Nessus	Debian DLA-626-1 : phpmyadmin security update	19 Sep 201600:00	–	nessus
Tenable Nessus	FreeBSD : phpmyadmin -- multiple vulnerabilities (ef70b201-645d-11e6-9cdc-6805ca0b3d42)	18 Aug 201600:00	–	nessus
Tenable Nessus	GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities	12 Jan 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-1021)	30 Aug 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-1027)	30 Aug 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.17 / 4.4.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities (PMASA-2016-29 - PMASA-2016-56) (deprecated)	21 Nov 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.0 < 4.0.10.17 / 4.4.0 < 4.4.15.8 / 4.6.0 < 4.6.4 Multiple Vulnerabilities	30 Nov 202000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-6613	25 Aug 202500:00	–	nessus

Vulners

Node

phpmyadmin phpmyadminRange4.0–4.0.10.17composer

phpmyadmin phpmyadminRange4.4–4.4.15.8composer

phpmyadmin phpmyadminRange4.6–4.6.4composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-6613
lists	www.lists.debian.org/debian-lts-announce/2019/06/msg00009.html
security	www.security.gentoo.org/glsa/201701-32
phpmyadmin	www.phpmyadmin.net/security/PMASA-2016-36
securityfocus	www.securityfocus.com/bid/94115
github	www.github.com/advisories/GHSA-6j2v-g9rg-qcm5

24 Apr 2024 17:20Current

6.9Medium risk

Vulners AI Score6.9

CVSS 22.1

CVSS 35.3

EPSS0.00324