PT-2014-8763 · Phpmyadmin+1 · Phpmyadmin+1

Madhura Jayaratne · Published 2014-11-25 · Updated 2024-06-15 · CVE-2014-8961

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.1.x through 4.1.14.6 phpMyAdmin versions 4.2.x through 4.2.11

Description A directory traversal issue exists in the error-reporting feature, allowing remote authenticated users to obtain potentially sensitive information about a file's line count via a crafted parameter.

Recommendations For phpMyAdmin versions 4.1.x through 4.1.14.6, update to version 4.1.14.7 or later. For phpMyAdmin versions 4.2.x through 4.2.11, update to version 4.2.12 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2014-2385

CVE-2014-8961

MGASA-2014-0495

OPENSUSE-SU-2024:10054-1

Affected Products

Alt Linux

Phpmyadmin

References · 153

• https://github.com/phpmyadmin/phpmyadmin/commit/b99b6b6672ff2419f05b05740c80c7a23c1da994 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8961 · Security Note
• https://ubuntu.com/security/CVE-2014-8961 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8959 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-8961 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-8961 · Security Note
• http://phpmyadmin.net/home_page/security/PMASA-2014-16.php · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-8961 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8961 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2014-8961 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8958 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10054-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0495 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2014:228 · Vendor Advisory
• https://security.gentoo.org/glsa/201505-03 · Vendor Advisory