CVE-2008-7252 phpMyAdmin unsafely handles temporary files
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyadmin/phpmyadmin(Packagist) | >= 2.11.0, < 2.11.10 | 2.11.10 |
| debian/phpmyadmin(Debian:12) | < 4:3.0.0-1 | 4:3.0.0-1 |
| debian/phpmyadmin(Debian:14) | < 4:3.0.0-1 | 4:3.0.0-1 |
| debian/phpmyadmin(Debian:13) | < 4:3.0.0-1 | 4:3.0.0-1 |
| phpmyadmin/phpmyadmin | = 2.11.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0-beta1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0beta1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.0rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.1rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.2.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.2.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.2.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.3 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.3-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.3.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.3rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.4 | No fix listed |
Show 24 more
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyadmin/phpmyadmin | = 2.11.4-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.4.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.4rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.5rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.6 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.6-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.6.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.6rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.7 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.7.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.8 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.3 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.4 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.5 | No fix listed |
| phpmyadmin/phpmyadmin | = 2.11.9.6 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- web.archive.org
- web.archive.org
- web.archive.org
- SUSE-SR:2010:001 vendor-advisory
- phpmyadmin.svn.sourceforge.net
- phpmyadmin.svn.sourceforge.net
- DSA-2034 vendor-advisory
- www.phpmyadmin.net vendor-advisory
- Debian Security Tracker CVE-2008-7252 vendor-advisory
- github.com
- 38211 third-party-advisory vendor-advisory
- 39503 third-party-advisory vendor-advisory
- 37826 patch vdb-entry
- ADV-2010-0910 vdb-entry vendor-advisory