phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Phpmyadmin | Phpmyadmin | 2.4.0 | 2.4.0 |
Phpmyadmin | Phpmyadmin | 2.5.0 | 2.5.0 |
Phpmyadmin | Phpmyadmin | 2.5.1 | 2.5.1 |
Phpmyadmin | Phpmyadmin | 2.5.2 | 2.5.2 |
Phpmyadmin | Phpmyadmin | 2.5.4 | 2.5.4 |
Phpmyadmin | Phpmyadmin | 2.5.5 | 2.5.5 |
Phpmyadmin | Phpmyadmin | 2.5.5_pl1 | 2.5.5_pl1 |
Phpmyadmin | Phpmyadmin | 2.5.5_rc1 | 2.5.5_rc1 |
Phpmyadmin | Phpmyadmin | 2.5.5_rc2 | 2.5.5_rc2 |
Phpmyadmin | Phpmyadmin | 2.5.6_rc1 | 2.5.6_rc1 |
Phpmyadmin | Phpmyadmin | 2.5.7 | 2.5.7 |
Phpmyadmin | Phpmyadmin | 2.5.7_pl1 | 2.5.7_pl1 |
Phpmyadmin | Phpmyadmin | 2.6.0_pl1 | 2.6.0_pl1 |
Phpmyadmin | Phpmyadmin | 2.6.0_pl2 | 2.6.0_pl2 |
Phpmyadmin | Phpmyadmin | 2.6.0_pl3 | 2.6.0_pl3 |