PT-2013-4246 · Phpmyadmin · Phpmyadmin

Janek Vind · Publicado 2013-04-26 · Atualizado 2024-06-15 · CVE-2013-3240

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.0.0-rc3

Description The issue concerns a directory traversal vulnerability in the Export feature. This allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type.

Recommendations For versions prior to 4.0.0-rc3, update to version 4.0.0-rc3 or later to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2013-3240

OPENSUSE-SU-2024:10054-1

Produtos afetados

Phpmyadmin

Referências · 130

• 🔥 https://exploit-db.com/exploits/25003 · Exploit
• https://suse.com/security/cve/CVE-2016-9859 · Nota
• https://suse.com/security/cve/CVE-2016-9865 · Nota
• https://suse.com/security/cve/CVE-2015-3903 · Nota
• https://suse.com/security/cve/CVE-2016-5706 · Nota
• https://suse.com/security/cve/CVE-2013-3241 · Nota
• https://suse.com/security/cve/CVE-2016-2044 · Nota
• https://suse.com/security/cve/CVE-2016-5703 · Nota
• https://suse.com/security/cve/CVE-2013-4995 · Nota
• https://suse.com/security/cve/CVE-2016-2038 · Nota
• https://suse.com/security/cve/CVE-2016-6618 · Nota
• https://suse.com/security/cve/CVE-2016-6630 · Nota
• https://suse.com/security/cve/CVE-2013-4999 · Nota
• https://suse.com/security/cve/CVE-2016-9847 · Nota
• https://suse.com/security/cve/CVE-2016-2560 · Nota