CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS
Percentile
96.5%
Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a … (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | phpmyadmin | < 4:3.4.3.1-1 | phpmyadmin_4:3.4.3.1-1_all.deb |
Debian | 11 | all | phpmyadmin | < 4:3.4.3.1-1 | phpmyadmin_4:3.4.3.1-1_all.deb |
Debian | 999 | all | phpmyadmin | < 4:3.4.3.1-1 | phpmyadmin_4:3.4.3.1-1_all.deb |
Debian | 13 | all | phpmyadmin | < 4:3.4.3.1-1 | phpmyadmin_4:3.4.3.1-1_all.deb |