CVE-2008-7252

Related Files

Gentoo Linux Security Advisory 201201-01

Posted Jan 5, 2012

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201201-1 - Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. Versions less than 3.4.9 are affected.

tags | advisory, arbitrary, php, vulnerability

systems | linux, gentoo

advisories | CVE-2008-7251, CVE-2008-7252, CVE-2010-2958, CVE-2010-3055, CVE-2010-3056, CVE-2010-3263, CVE-2011-0986, CVE-2011-0987, CVE-2011-2505, CVE-2011-2506, CVE-2011-2507, CVE-2011-2508, CVE-2011-2642, CVE-2011-2643, CVE-2011-2718, CVE-2011-2719, CVE-2011-3646, CVE-2011-4064, CVE-2011-4107, CVE-2011-4634, CVE-2011-4780, CVE-2011-4782

SHA-256 | a9a0414a3c076b4e97dee46444baeb67c679e1b447f44f4f421858257e7dff0c

Download | Favorite | View

Debian Linux Security Advisory 2034-1

Posted Apr 19, 2010

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2034-1 - Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web.

tags | advisory, web, vulnerability

systems | linux, debian

advisories | CVE-2008-7251, CVE-2008-7252, CVE-2009-4605

SHA-256 | c11128f13b24f32ffcfa461f8a03e8e60f8c0e84d7f0db53e30c1c42f1ab272e

Download | Favorite | View

Mandriva Linux Security Advisory 2010-018

Posted Jan 20, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-018 - libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors. libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors. scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors. This update provides phpMyAdmin 2.11.10, which is not vulnerable to these issues.

tags | advisory, remote, php, csrf

systems | linux, mandriva

advisories | CVE-2008-7251, CVE-2008-7252, CVE-2009-4605

SHA-256 | 465d04ba76b44a7e66d801bf38cc94126b1c5b15996fd17727056b7716222fff

Download | Favorite | View