CVE-2004-1148: Medium severity phpmyadmin phpmyadmin vulnerability
Published Dec 15, 2004
·Updated
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sqllocalfile parameter.
Affected Software
15 affected components
phpMyAdmin phpMyAdmin=2.5.0
phpMyAdmin phpMyAdmin=2.5.5_rc1
phpMyAdmin phpMyAdmin=2.6.0_pl3
phpMyAdmin phpMyAdmin=2.5.7_pl1
phpMyAdmin phpMyAdmin=2.4.0
phpMyAdmin phpMyAdmin=2.5.5
phpMyAdmin phpMyAdmin=2.5.7
phpMyAdmin phpMyAdmin=2.5.6_rc1
phpMyAdmin phpMyAdmin=2.6.0_pl1
phpMyAdmin phpMyAdmin=2.5.2
phpMyAdmin phpMyAdmin=2.5.1
phpMyAdmin phpMyAdmin=2.6.0_pl2
phpMyAdmin phpMyAdmin=2.5.4
phpMyAdmin phpMyAdmin=2.5.5_rc2
phpMyAdmin phpMyAdmin=2.5.5_pl1
Event History
Dec 15, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1148?
CVE-2004-1148 is classified as a medium-severity vulnerability.
2
How do I fix CVE-2004-1148?
To mitigate CVE-2004-1148, upgrade phpMyAdmin to version 2.6.1 or later.
3
Which versions of phpMyAdmin are affected by CVE-2004-1148?
CVE-2004-1148 affects phpMyAdmin versions prior to 2.6.1.
4
What type of vulnerability is CVE-2004-1148?
CVE-2004-1148 is a file inclusion vulnerability that allows remote attackers to read arbitrary files.
5
Can CVE-2004-1148 be exploited remotely?
Yes, CVE-2004-1148 can be exploited remotely without user authentication.