CVE-2004-0129

Published: Mar 3, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.

Affected (29)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 2.0.1
Phpmyadmin Phpmyadmin	Version 2.0.2
Phpmyadmin Phpmyadmin	Version 2.0.3
Phpmyadmin Phpmyadmin	Version 2.0.4
Phpmyadmin Phpmyadmin	Version 2.0.5
Phpmyadmin Phpmyadmin	Version 2.0
Phpmyadmin Phpmyadmin	Version 2.1.1
Phpmyadmin Phpmyadmin	Version 2.1.2
Phpmyadmin Phpmyadmin	Version 2.1
Phpmyadmin Phpmyadmin	Version 2.2.2
Phpmyadmin Phpmyadmin	Version 2.2.3
Phpmyadmin Phpmyadmin	Version 2.2.4
Phpmyadmin Phpmyadmin	Version 2.2.5
Phpmyadmin Phpmyadmin	Version 2.2.6
Phpmyadmin Phpmyadmin	Version 2.2_pre1
Phpmyadmin Phpmyadmin	Version 2.2_rc1
Phpmyadmin Phpmyadmin	Version 2.2_rc2
Phpmyadmin Phpmyadmin	Version 2.2_rc3
Phpmyadmin Phpmyadmin	Version 2.3.1
Phpmyadmin Phpmyadmin	Version 2.3.2
Phpmyadmin Phpmyadmin	Version 2.4.0
Phpmyadmin Phpmyadmin	Version 2.5.0
Phpmyadmin Phpmyadmin	Version 2.5.1
Phpmyadmin Phpmyadmin	Version 2.5.2
Phpmyadmin Phpmyadmin	Version 2.5.4
Phpmyadmin Phpmyadmin	Version 2.5.5
Phpmyadmin Phpmyadmin	Version 2.5.5_pl1
Phpmyadmin Phpmyadmin	Version 2.5.5_rc1
Phpmyadmin Phpmyadmin	Version 2.5.5_rc2