Lucene search

K
redhatcveRedhat.comRH:CVE-2008-1924
HistoryOct 04, 2019 - 7:49 p.m.

CVE-2008-1924

2019-10-0419:49:05
redhat.com
access.redhat.com
7

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

70.7%

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

70.7%