GitHub Advisoryadvisory · Packagist

GHSA-xhqq-554j-p4x8 phpMyAdmin Directory Traversal Vulnerability

MEDIUM Published 2022-05-17 Modified 2024-01-15 Official page ↗
Aliases
CVE-2011-2718
Ecosystem
Packagist
Packages
phpmyadmin/phpmyadmin
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2024-01-15

Affected packages

• Packagist phpmyadmin/phpmyadmin: >= 3.4, < 3.4.3.2 → fixed in 3.4.3.2

Description

Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) `libraries/schema/User_Schema.class.php` and (2) `schema_export.php`.

Related

Alias · CVE (1)

  • CVE-2011-2718 Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References