Security Advisory

CVE-2008-1924

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-04-23 16:00:00

Last updated 2024-08-07 08:41:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.

← Browse all CVEs View on cve.org ↗