Local file inclusion vulnerability.

🗓️ 20 Nov 2014 00:00:00Reported by phpMyAdminType

phpmyadmin🔗 www.phpmyadmin.net👁 30 Views

Local file inclusion vulnerability in phpMyAdmin GIS editor feature. Serious severity. Affected versions: 4.0.x (prior to 4.0.10.6), 4.1.x (prior to 4.1.14.7), 4.2.x (prior to 4.2.12). Mitigation factor: Requires logged-in user. Upgrade to newer version or apply patch

Reporter	Title	Published	Views	Family All 41
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.6 / 4.1.x < 4.1.14.7 / 4.2.x < 4.2.12 Multiple Vulnerabilities (PMASA-2014-13 through 16)	24 Nov 201400:00	–	nessus
Tenable Nessus	Fedora 19 : phpMyAdmin-4.2.12-1.fc19 (2014-15535)	2 Dec 201400:00	–	nessus
Tenable Nessus	Fedora 20 : phpMyAdmin-4.2.12-1.fc20 (2014-15538)	2 Dec 201400:00	–	nessus
Tenable Nessus	Fedora 21 : phpMyAdmin-4.2.12-1.fc21 (2014-15588)	7 Dec 201400:00	–	nessus
Tenable Nessus	FreeBSD : phpMyAdmin -- XSS and information disclosure vulnerabilities (a5d4a82a-7153-11e4-88c7-6805ca0b3d42)	24 Nov 201400:00	–	nessus
Tenable Nessus	GLSA-201505-03 : phpMyAdmin: Multiple vulnerabilities	1 Jun 201500:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : phpmyadmin (MDVSA-2014:228)	27 Nov 201400:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-SU-2014:1561-1)	6 Dec 201400:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.6 / 4.1.x < 4.1.14.7 / 4.2.x < 4.2.12 Multiple Vulnerabilities (PMASA-2014-13 - PMASA-2014-16)	27 Nov 201400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2014-8959	24 Aug 202500:00	–	nessus

Vulners

Node

phpmyadmin phpmyadminRange4.0.0–4.0.10.6

phpmyadmin phpmyadminRange4.1.0–4.1.14.7

phpmyadmin phpmyadminRange4.2.0–4.2.12

20 Nov 2014 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.5

EPSS0.02772