Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-1924
HistoryApr 23, 2008 - 4:05 p.m.

CVE-2008-1924

2008-04-2316:05:00
CWE-200
[email protected]
web.nvd.nist.gov
7

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.

Affected configurations

Nvd
Node
phpmyadminphpmyadminRange≤2.11.5.1
OR
phpmyadminphpmyadminMatch2.10.0
OR
phpmyadminphpmyadminMatch2.10.0.1
OR
phpmyadminphpmyadminMatch2.10.0.2
OR
phpmyadminphpmyadminMatch2.10.1
OR
phpmyadminphpmyadminMatch2.10.2
OR
phpmyadminphpmyadminMatch2.10.3
OR
phpmyadminphpmyadminMatch2.10.3rc1
OR
phpmyadminphpmyadminMatch2.11.0
OR
phpmyadminphpmyadminMatch2.11.0beta1
OR
phpmyadminphpmyadminMatch2.11.0rc1
OR
phpmyadminphpmyadminMatch2.11.1
OR
phpmyadminphpmyadminMatch2.11.1.1
OR
phpmyadminphpmyadminMatch2.11.1.2
OR
phpmyadminphpmyadminMatch2.11.1rc1
OR
phpmyadminphpmyadminMatch2.11.2
OR
phpmyadminphpmyadminMatch2.11.2.1
OR
phpmyadminphpmyadminMatch2.11.2.2
OR
phpmyadminphpmyadminMatch2.11.3
OR
phpmyadminphpmyadminMatch2.11.3rc1
OR
phpmyadminphpmyadminMatch2.11.4
OR
phpmyadminphpmyadminMatch2.11.4rc1
OR
phpmyadminphpmyadminMatch2.11.5
OR
phpmyadminphpmyadminMatch2.11.6rc1
VendorProductVersionCPE
phpmyadminphpmyadmin*cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.10.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.10.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.10.0.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.0.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.10.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.10.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.10.3cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.10.3rc1cpe:2.3:a:phpmyadmin:phpmyadmin:2.10.3rc1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.0beta1cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0beta1:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

Related

nessus 6
openvas 8
securityvulns 4
phpmyadmin 1
ubuntucve 1
debiancve 1
cvelist 1
gentoo 1
cve 1
freebsd 1
redhatcve 1
prion 1
debian 1
osv 1
nessus
nessus
FreeBSD : phpmyadmin -- Shared Host Information Disclosure (fe971a0f-1246-11dd-bab7-0016179b2dd5)
2008-04-28 00:00:00
GLSA-200805-02 : phpMyAdmin: Information disclosure
2008-05-09 00:00:00
Debian DSA-1557-1 : phpmyadmin - insufficient input sanitising
2008-04-28 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200805-02 (phpmyadmin)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200805-02 (phpmyadmin)
2008-09-24 00:00:00
FreeBSD Ports: phpmyadmin
2008-09-04 00:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-05-06 00:00:00
[ GLSA 200805-02 ] phpMyAdmin: Information disclosure
2008-05-06 00:00:00
[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities
2008-04-27 00:00:00
phpmyadmin
phpmyadmin
File disclosure on shared hosts via a crafted HTTP POST request.
2008-04-22 00:00:00
ubuntucve
ubuntucve
CVE-2008-1924
2008-04-23 00:00:00
debiancve
debiancve
CVE-2008-1924
2008-04-23 16:05:00
cvelist
cvelist
CVE-2008-1924
2008-04-23 16:00:00
gentoo
gentoo
phpMyAdmin: Information disclosure
2008-05-05 00:00:00
cve
cve
CVE-2008-1924
2008-04-23 16:05:00
freebsd
freebsd
phpmyadmin -- Shared Host Information Disclosure
2008-04-23 00:00:00
redhatcve
redhatcve
CVE-2008-1924
2019-10-04 19:49:05
prion
prion
Design/Logic Flaw
2008-04-23 16:05:00
debian
debian
[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities
2008-04-24 20:32:28
osv
osv
phpmyadmin - several vulnerabilities
2008-04-24 00:00:00

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON
Related for NVD:CVE-2008-1924
nessus6openvas8securityvulns4phpmyadmin1ubuntucve1debiancve1cvelist1gentoo1cve1freebsd1redhatcve1prion1debian1osv1