waraxe.us vulnerabilities and exploits

(subscribe to this query)

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-4531. Reason: This candidate is a duplicate of CVE-2012-4531. Notes: All CVE users should reference CVE-2012-4531 instead of this candidate. All references and descriptions in this candidate have been removed...

Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x prior to 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type.

Phpmyadmin Phpmyadmin 4.0.0

1 EDB exploit

phpMyAdmin 3.5.x prior to 3.5.8 and 4.x prior to 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable f...

Phpmyadmin Phpmyadmin 3.5.7 Phpmyadmin Phpmyadmin 3.5.8 Phpmyadmin Phpmyadmin 3.5.2.1 Phpmyadmin Phpmyadmin 3.5.2.2 Phpmyadmin Phpmyadmin 3.5.1.0 Phpmyadmin Phpmyadmin 3.5.6 Phpmyadmin Phpmyadmin 3.5.0.0 Phpmyadmin Phpmyadmin 3.5.5 Phpmyadmin Phpmyadmin 4.0.0 Phpmyadmin Phpmyadmin 3.5.2.0 Phpmyadmin Phpmyadmin 3.5.3.0 Phpmyadmin Phpmyadmin 3.5.4

1 EDB exploit

export.php (aka the export script) in phpMyAdmin 4.x prior to 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users to inject values via a crafted request.

Phpmyadmin Phpmyadmin 4.0.0

1 EDB exploit

Invision Power Board prior to 3.3.1 fails to sanitize user-supplied input which could allow remote malicious users to obtain sensitive information or execute arbitrary code by uploading a malicious file.

Invisioncommunity Invision Power Board

1 EDB exploit

phpMyAdmin 3.5.x prior to 3.5.8 and 4.x prior to 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.

Phpmyadmin Phpmyadmin 3.5.5 Phpmyadmin Phpmyadmin 3.5.3.0 Phpmyadmin Phpmyadmin 3.5.7 Phpmyadmin Phpmyadmin 3.5.4 Phpmyadmin Phpmyadmin 3.5.8 Phpmyadmin Phpmyadmin 3.5.2.2 Phpmyadmin Phpmyadmin 3.5.1.0 Phpmyadmin Phpmyadmin 3.5.2.1 Phpmyadmin Phpmyadmin 3.5.6 Phpmyadmin Phpmyadmin 3.5.0.0 Phpmyadmin Phpmyadmin 3.5.2.0 Phpmyadmin Phpmyadmin 4.0.0

2 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook