Page 17 of 85 results (0.009 seconds)

CVSS: 5.0EPSS: 0%CPEs: 15EXPL: 0

CVE-2004-1148

https://notcve.org/view.php?id=CVE-2004-1148

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter. • http://marc.info/?l=bugtraq&m=110295781828323&w=2 http://www.exaprobe.com/labs/advisories/esa-2004-1213.html https://exchange.xforce.ibmcloud.com/vulnerabilities/18441 •

CVSS: 6.8EPSS: 0%CPEs: 17EXPL: 2

CVE-2004-1055

https://notcve.org/view.php?id=CVE-2004-1055

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser. • http://www.netvigilance.com/html/advisory0005.htm http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3 https://exchange.xforce.ibmcloud.com/vulnerabilities/18158 •

CVSS: 5.0EPSS: 1%CPEs: 29EXPL: 2

CVE-2004-0129 – phpMyAdmin 2.x - 'Export.php' File Disclosure

https://notcve.org/view.php?id=CVE-2004-0129

Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter. Vulnerabilidad de atravesamiento de directorios en export.php en phpMyAdmin 2.5.5 y anteriores permite a atacantes remotos leer ficheros arbitrarios mediante secuencias .. (punto punto) en el parámetro what • https://www.exploit-db.com/exploits/23640 http://marc.info/?l=bugtraq&m=107582619125932&w=2 http://secunia.com/advisories/10769 http://security.gentoo.org/glsa/glsa-200402-05.xml http://sourceforge.net/forum/forum.php?forum_id=350228 http://www.osvdb.org/3800 http://www.phpmyadmin.net/home_page/relnotes.php?rel=0 http://www.securityfocus.com/bid/9564 https://exchange.xforce.ibmcloud.com/vulnerabilities/15021 •

CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0

CVE-2001-1060

https://notcve.org/view.php?id=CVE-2001-1060

phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php. • http://freshmeat.net/redir/phpmyadmin/8001/url_changelog http://www.securityfocus.com/archive/1/200596 http://www.securityfocus.com/bid/3121 •

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0

CVE-2001-0478

https://notcve.org/view.php?id=CVE-2001-0478

Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script. • http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html http://www.securityfocus.com/bid/2642 •