Home > Vulnerability Database > CVE-2011-2718

Mend.io Vulnerability Database

CVE-2011-2718

Date: August 1, 2011

Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.

Language: PHP

Severity Score

5.0

Related Resources (20)

Url: http://www.openwall.com/lists/oss-security/2011/07/26/10

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html

Url: http://www.securityfocus.com/bid/48874

Url: http://osvdb.org/74111

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/68768

Url: https://web.archive.org/web/20121105034518/http://www.mandriva.com/en/support/security/advisories?name=MDVSA-2011:124

Url: http://www.openwall.com/lists/oss-security/2011/07/25/4

Url: http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=3ae58f0cd6b89ad4767920f9b214c38d3f6d4393

Url: https://bugzilla.redhat.com/show_bug.cgi?id=725383

Url: https://web.archive.org/web/20120111084137/http://www.securityfocus.com/bid/48874

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html

Url: http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=3ae58f0cd6b89ad4767920f9b214c38d3f6d4393

Url: http://secunia.com/advisories/45365

Url: https://github.com/phpmyadmin/composer

Url: http://www.phpmyadmin.net/home_page/security/PMASA-2011-11.php

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:124

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-2718

Url: http://secunia.com/advisories/45515

Url: https://github.com/phpmyadmin/phpmyadmin/commit/3ae58f0cd6b89ad4767920f9b214c38d3f6d4393

Url: https://www.mend.io/vulnerability-database/CVE-2011-2718

Severity Score

5.0

Weakness Type (CWE)

Path Traversal

CWE-22

CVSS v3.1

Base Score:	5.0
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-2718

Date: August 1, 2011

Language: PHP

Severity Score

Related Resources (20)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?