CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 2CVE-2008-4454 – MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
https://notcve.org/view.php?id=CVE-2008-4454
06 Oct 2008 — Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the lang parameter to actions.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Una vulnerabilidad de salto de directorio en el administrador de MySQL EKINdesigns MySQL Quick Admin 1.5.5, permite a atacantes remotos leer y ejecutar archivos arbitrarios a través de un .. (punto punto) en... • https://www.exploit-db.com/exploits/6641 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.1EPSS: 1%CPEs: 1EXPL: 1CVE-2008-4455 – MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
https://notcve.org/view.php?id=CVE-2008-4455
06 Oct 2008 — Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the language cookie. Una vulnerabilidad de salto de directorio en el fichero index.php del administrador de MySQL EKINdesigns MySQL Quick Admin versiones 1.5.5 anteriores, cuando magic_quotes_gpc está desactivado, permite a atacantes remotos leer y ejecutar archivos arbitrarios a través de un ..... • https://www.exploit-db.com/exploits/6641 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •