Security Advisory

CVE-2008-5587

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-12-16 18:00:00
Last updated 2024-08-07 10:56:47
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.