← Back

CVE-2008-1924

nvd nist
Published: Apr 23, 2008Modified: Apr 23, 2026

JSON object

Loading...
3.5
Vector
AV:N/AC:M/Au:S/C:P/I:N/A:N
Exploitability: 6.8 / Impact: 2.9
Source: NVD

Description

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.

Affected (24)

Phpmyadmin
1 product
Phpmyadmin
Configuration A
24 vulnerable
Vulnerable SoftwareAffected Versions
Phpmyadmin
Phpmyadmin
Up to 2.11.5.1
Phpmyadmin
Version 2.10.0.1
Phpmyadmin
Version 2.10.0.2
Phpmyadmin
Version 2.10.0
Phpmyadmin
Version 2.10.1
Phpmyadmin
Version 2.10.2
Phpmyadmin
Version 2.10.3
Phpmyadmin
Version 2.10.3rc1
Phpmyadmin
Version 2.11.0
Phpmyadmin
Version 2.11.0beta1
Phpmyadmin
Version 2.11.0rc1
Phpmyadmin
Version 2.11.1.1
Phpmyadmin
Version 2.11.1.2
Phpmyadmin
Version 2.11.1
Phpmyadmin
Version 2.11.1rc1
Phpmyadmin
Version 2.11.2.1
Phpmyadmin
Version 2.11.2.2
Phpmyadmin
Version 2.11.2
Phpmyadmin
Version 2.11.3
Phpmyadmin
Version 2.11.3rc1
Phpmyadmin
Version 2.11.4
Phpmyadmin
Version 2.11.4rc1
Phpmyadmin
Version 2.11.5
Phpmyadmin
Version 2.11.6rc1

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (30)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.