6.8
CVSSv2

CVE-2008-4455

Published: 06/10/2008 Updated: 19/10/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to read and execute arbitrary files via a .. (dot dot) in the language cookie.

Vulnerable Product Search on Vulmon Subscribe to Product

mysql quick admin mysql quick admin 1.5.5

Exploits

# MySQL Quick Admin <= 155 (COOKIE) Local File Inclusion Vulnerability # url: wwwmysqlquickadmincom/ # # Author: JosS # mail: sys-project[at]hotmail[dot]com # site: spanish-hackerscom # team: Spanish Hackers Team - [SHT] # # This was written for educational purpose Use it at your own risk # Author will be not responsible for ...