CVE-2008-5587

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

Link	Resource
http://www.securityfocus.com/bid/32670	Exploit
http://secunia.com/advisories/33014	Vendor Advisory
http://secunia.com/advisories/33263
http://www.debian.org/security/2008/dsa-1693
http://securityreason.com/securityalert/4737
http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/47140
https://www.exploit-db.com/exploits/7363

Configuration 1

cpe:2.3:a:phppgadmin:phppgadmin:*:*:*:*:*:*:*:* cpe:2.3:a:phppgadmin:phppgadmin:3.5.3:*:*:*:*:*:*:* cpe:2.3:a:phppgadmin:phppgadmin:2.2:*:*:*:*:*:*:* cpe:2.3:a:phppgadmin:phppgadmin:3.1:*:*:*:*:*:*:* cpe:2.3:a:phppgadmin:phppgadmin:3.4.1:*:*:*:*:*:*:* cpe:2.3:a:phppgadmin:phppgadmin:4.1.1:*:*:*:*:*:*:* cpe:2.3:a:phppgadmin:phppgadmin:2.2.1:*:*:*:*:*:*:* cpe:2.3:a:phppgadmin:phppgadmin:3.5:*:*:*:*:*:*:* cpe:2.3:a:phppgadmin:phppgadmin:3.5.2:*:*:*:*:*:*:*

---

Published : 2008-12-16 07:07

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-5587

Mitre link : CVE-2008-5587

No products.

CWE-22