CVE-2008-7252: phpMyAdmin unsafely handles temporary files
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Other sources
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
— MITRE
phpMyAdmin unsafely handles temporary files
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/phpmyadmin/phpmyadminto a version that resolves this vulnerability.Fixed in 2.11.10
Event History
Frequently Asked Questions
What is the severity of CVE-2008-7252?
CVE-2008-7252 has an unknown impact and attack vectors due to predictable filenames for temporary files in phpMyAdmin.
How do I fix CVE-2008-7252?
To fix CVE-2008-7252, upgrade phpMyAdmin to version 2.11.10 or later.
Which versions of phpMyAdmin are affected by CVE-2008-7252?
CVE-2008-7252 affects phpMyAdmin versions 2.11.x before 2.11.10.
What files are involved in the CVE-2008-7252 vulnerability?
The vulnerability is related to the libraries/File.class.php file in phpMyAdmin.
Is there a workaround for CVE-2008-7252 if I cannot upgrade phpMyAdmin?
There is no known workaround for CVE-2008-7252, and upgrading is the recommended mitigation.