CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 2CVE-2008-4454 – MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
https://notcve.org/view.php?id=CVE-2008-4454
Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the lang parameter to actions.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Una vulnerabilidad de salto de directorio en el administrador de MySQL EKINdesigns MySQL Quick Admin 1.5.5, permite a atacantes remotos leer y ejecutar archivos arbitrarios a través de un .. (punto punto) en el parámetro lang a actions.php. • https://www.exploit-db.com/exploits/6641 https://www.exploit-db.com/exploits/7020 http://secunia.com/advisories/31820 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 1CVE-2008-4455 – MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
https://notcve.org/view.php?id=CVE-2008-4455
Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the language cookie. Una vulnerabilidad de salto de directorio en el fichero index.php del administrador de MySQL EKINdesigns MySQL Quick Admin versiones 1.5.5 anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos leer y ejecutar archivos arbitrarios a través de un .. (punto punto) en la cookie del idioma. • https://www.exploit-db.com/exploits/6641 http://secunia.com/advisories/31820 http://www.securityfocus.com/bid/31517 https://exchange.xforce.ibmcloud.com/vulnerabilities/45606 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •