5
CVSSv2

CVE-2004-1148

Published: 10/01/2005 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

phpMyAdmin prior to 2.6.1, when configured with UploadDir functionality, allows remote malicious users to read arbitrary files via the sql_localfile parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

phpmyadmin phpmyadmin 2.5.0

phpmyadmin phpmyadmin 2.5.5 rc1

phpmyadmin phpmyadmin 2.6.0 pl3

phpmyadmin phpmyadmin 2.5.7 pl1

phpmyadmin phpmyadmin 2.4.0

phpmyadmin phpmyadmin 2.5.5

phpmyadmin phpmyadmin 2.5.7

phpmyadmin phpmyadmin 2.5.6 rc1

phpmyadmin phpmyadmin 2.6.0 pl1

phpmyadmin phpmyadmin 2.5.2

phpmyadmin phpmyadmin 2.5.1

phpmyadmin phpmyadmin 2.6.0 pl2

phpmyadmin phpmyadmin 2.5.4

phpmyadmin phpmyadmin 2.5.5 rc2

phpmyadmin phpmyadmin 2.5.5 pl1