NetSight
IP …
low3.5

CVE-2008-1924

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read …

Impact

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.

Affected products

VendorProductAffected versions
PhpmyadminPhpmyadmin
through 2.11.5.1
Versions 2.10.0, 2.10.0.1, 2.10.0.2, 2.10.1, 2.10.2

Weakness classification

CWE-200

References