CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2508

Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.112

EPSS Ranking 93.2%

CVSS Severity

CVSS v2 Score 6.0

References

Products affected by CVE-2011-2508

Phpmyadmin » Phpmyadmin » Version: 3.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0
Phpmyadmin » Phpmyadmin » Version: 3.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1
Phpmyadmin » Phpmyadmin » Version: 3.0.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1
Phpmyadmin » Phpmyadmin » Version: 3.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0
Phpmyadmin » Phpmyadmin » Version: 3.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1
Phpmyadmin » Phpmyadmin » Version: 3.1.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2
Phpmyadmin » Phpmyadmin » Version: 3.1.3

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3
Phpmyadmin » Phpmyadmin » Version: 3.1.3.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1
Phpmyadmin » Phpmyadmin » Version: 3.1.3.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2
Phpmyadmin » Phpmyadmin » Version: 3.1.4

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4
Phpmyadmin » Phpmyadmin » Version: 3.1.5

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5
Phpmyadmin » Phpmyadmin » Version: 3.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0
Phpmyadmin » Phpmyadmin » Version: 3.2.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1
Phpmyadmin » Phpmyadmin » Version: 3.2.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2
Phpmyadmin » Phpmyadmin » Version: 3.3.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.0.0
Phpmyadmin » Phpmyadmin » Version: 3.3.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.1.0
Phpmyadmin » Phpmyadmin » Version: 3.3.10.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.10.0
Phpmyadmin » Phpmyadmin » Version: 3.3.10.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.10.1
Phpmyadmin » Phpmyadmin » Version: 3.3.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.2.0
Phpmyadmin » Phpmyadmin » Version: 3.3.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.3.0
Phpmyadmin » Phpmyadmin » Version: 3.3.4.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.4.0
Phpmyadmin » Phpmyadmin » Version: 3.3.5.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.0
Phpmyadmin » Phpmyadmin » Version: 3.3.5.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.1
Phpmyadmin » Phpmyadmin » Version: 3.3.6

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.6
Phpmyadmin » Phpmyadmin » Version: 3.3.7

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.7
Phpmyadmin » Phpmyadmin » Version: 3.3.8

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8
Phpmyadmin » Phpmyadmin » Version: 3.3.8.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8.1
Phpmyadmin » Phpmyadmin » Version: 3.3.9.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.0
Phpmyadmin » Phpmyadmin » Version: 3.3.9.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.1
Phpmyadmin » Phpmyadmin » Version: 3.3.9.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.2
Phpmyadmin » Phpmyadmin » Version: 3.4.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.0.0
Phpmyadmin » Phpmyadmin » Version: 3.4.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.1.0
Phpmyadmin » Phpmyadmin » Version: 3.4.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.2.0
Phpmyadmin » Phpmyadmin » Version: 3.4.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2508

Products

Pricing

Contact Us