Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-2508
HistoryJul 14, 2011 - 11:55 p.m.

CVE-2011-2508

2011-07-1423:55:05
CWE-22
[email protected]
web.nvd.nist.gov
5

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.22

Percentile

96.5%

JSON

Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a … (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter.

Affected configurations

Nvd
Node
phpmyadminphpmyadminMatch3.0.0
OR
phpmyadminphpmyadminMatch3.0.0alpha
OR
phpmyadminphpmyadminMatch3.0.0beta
OR
phpmyadminphpmyadminMatch3.0.0rc1
OR
phpmyadminphpmyadminMatch3.0.1
OR
phpmyadminphpmyadminMatch3.0.1rc1
OR
phpmyadminphpmyadminMatch3.0.1.1
OR
phpmyadminphpmyadminMatch3.1.0
OR
phpmyadminphpmyadminMatch3.1.0beta1
OR
phpmyadminphpmyadminMatch3.1.1
OR
phpmyadminphpmyadminMatch3.1.1rc1
OR
phpmyadminphpmyadminMatch3.1.2
OR
phpmyadminphpmyadminMatch3.1.2rc1
OR
phpmyadminphpmyadminMatch3.1.3
OR
phpmyadminphpmyadminMatch3.1.3rc1
OR
phpmyadminphpmyadminMatch3.1.3.1
OR
phpmyadminphpmyadminMatch3.1.3.2
OR
phpmyadminphpmyadminMatch3.1.4
OR
phpmyadminphpmyadminMatch3.1.4rc2
OR
phpmyadminphpmyadminMatch3.1.5
OR
phpmyadminphpmyadminMatch3.1.5rc1
OR
phpmyadminphpmyadminMatch3.2.0
OR
phpmyadminphpmyadminMatch3.2.0beta1
OR
phpmyadminphpmyadminMatch3.2.0rc1
OR
phpmyadminphpmyadminMatch3.2.1
OR
phpmyadminphpmyadminMatch3.2.1rc1
OR
phpmyadminphpmyadminMatch3.2.2
OR
phpmyadminphpmyadminMatch3.2.2rc1
OR
phpmyadminphpmyadminMatch3.3.0.0
OR
phpmyadminphpmyadminMatch3.3.1.0
OR
phpmyadminphpmyadminMatch3.3.2.0
OR
phpmyadminphpmyadminMatch3.3.3.0
OR
phpmyadminphpmyadminMatch3.3.4.0
OR
phpmyadminphpmyadminMatch3.3.5.0
OR
phpmyadminphpmyadminMatch3.3.5.1
OR
phpmyadminphpmyadminMatch3.3.6
OR
phpmyadminphpmyadminMatch3.3.7
OR
phpmyadminphpmyadminMatch3.3.8
OR
phpmyadminphpmyadminMatch3.3.8.1
OR
phpmyadminphpmyadminMatch3.3.9.0
OR
phpmyadminphpmyadminMatch3.3.9.1
OR
phpmyadminphpmyadminMatch3.3.9.2
OR
phpmyadminphpmyadminMatch3.3.10.0
OR
phpmyadminphpmyadminMatch3.3.10.1
Node
phpmyadminphpmyadminMatch3.4.0.0
OR
phpmyadminphpmyadminMatch3.4.1.0
OR
phpmyadminphpmyadminMatch3.4.2.0
OR
phpmyadminphpmyadminMatch3.4.3.0
VendorProductVersionCPE
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:alpha:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:beta:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:beta1:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 481

References

Related

phpmyadmin 1
debiancve 1
ubuntucve 1
cve 1
prion 1
cvelist 1
openvas 10
securityvulns 3
nessus 5
seebug 2
freebsd 1
packetstorm 1
osv 1
debian 1
gentoo 1
phpmyadmin
phpmyadmin
Possible directory traversal.
2011-07-02 00:00:00
debiancve
debiancve
CVE-2011-2508
2011-07-14 23:55:05
ubuntucve
ubuntucve
CVE-2011-2508
2011-07-14 00:00:00
cve
cve
CVE-2011-2508
2011-07-14 23:55:05
prion
prion
Directory traversal
2011-07-14 23:55:00
cvelist
cvelist
CVE-2011-2508
2011-07-14 23:00:00
openvas
openvas
FreeBSD Ports: phpmyadmin
2011-08-03 00:00:00
Fedora Update for phpMyAdmin FEDORA-2011-9144
2011-07-18 00:00:00
Fedora Update for phpMyAdmin FEDORA-2011-9144
2011-07-18 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-07-13 00:00:00
phpMyAdmin 3.x Multiple Remote Code Executions
2011-07-13 00:00:00
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-08-01 00:00:00
nessus
nessus
Fedora 14 : phpMyAdmin-3.4.3.1-1.fc14 (2011-9144)
2011-07-18 00:00:00
FreeBSD : phpmyadmin -- multiple vulnerabilities (7e4e5c53-a56c-11e0-b180-00216aa06fc2)
2011-07-05 00:00:00
phpMyAdmin 3.3.x / 3.4.x < 3.3.10.2 / 3.4.3.1 Multiple Vulnerabilities (PMASA-2011-5 - PMASA-2011-8)
2011-12-20 00:00:00
seebug
seebug
phpMyAdmin 3.x 多个安全漏洞
2011-07-07 00:00:00
phpMyAdmin 3.x Multiple Remote Code Executions
2011-07-09 00:00:00
freebsd
freebsd
phpmyadmin -- multiple vulnerabilities
2011-07-02 00:00:00
packetstorm
packetstorm
phpMyAdmin 3.x Remote Code Execution
2011-07-08 00:00:00
osv
osv
phpymadmin - several
2011-07-26 00:00:00
debian
debian
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-07-26 19:11:55
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2012-01-04 00:00:00

CVSS2

6

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.22

Percentile

96.5%

JSON
Related for NVD:CVE-2011-2508
phpmyadmin1debiancve1ubuntucve1cve1prion1cvelist1openvas10securityvulns3nessus5seebug2freebsd1packetstorm1osv1debian1gentoo1