PT-2013-4246 · Phpmyadmin · Phpmyadmin

Janek Vind · Published 2013-04-26 · Updated 2024-06-15 · CVE-2013-3240

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.0.0-rc3

Description The issue concerns a directory traversal vulnerability in the Export feature. This allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type.

Recommendations For versions prior to 4.0.0-rc3, update to version 4.0.0-rc3 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2013-3240

OPENSUSE-SU-2024:10054-1

Affected Products

Phpmyadmin

References · 130

• 🔥 https://exploit-db.com/exploits/25003 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3240 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10054-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2016-9859 · Note
• https://suse.com/security/cve/CVE-2016-9865 · Note
• https://suse.com/security/cve/CVE-2015-3903 · Note
• https://suse.com/security/cve/CVE-2016-5706 · Note
• https://suse.com/security/cve/CVE-2013-3241 · Note
• https://suse.com/security/cve/CVE-2016-2044 · Note
• https://suse.com/security/cve/CVE-2016-5703 · Note
• https://suse.com/security/cve/CVE-2013-4995 · Note
• https://suse.com/security/cve/CVE-2016-2038 · Note
• https://suse.com/security/cve/CVE-2016-6618 · Note
• https://suse.com/security/cve/CVE-2016-6630 · Note
• https://suse.com/security/cve/CVE-2013-4999 · Note