CVE-2008-7252: Critical severity phpmyadmin vulnerability
Published Jan 19, 2010
·Updated
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Other sources
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Affected Software
46 affected componentsFixes available
composer/phpmyadmin/phpmyadmin>=2.11.0<2.11.10
2.11.10
phpMyAdmin phpMyAdmin=2.11.4
phpMyAdmin phpMyAdmin=2.11.0rc1
phpMyAdmin phpMyAdmin=2.11.1.2
phpMyAdmin phpMyAdmin=2.11.5.1
phpMyAdmin phpMyAdmin=2.11.3rc1
phpMyAdmin phpMyAdmin=2.11.1
phpMyAdmin phpMyAdmin=2.11.5.0
phpMyAdmin phpMyAdmin=2.11.6rc1
phpMyAdmin phpMyAdmin=2.11.1rc1
phpMyAdmin phpMyAdmin=2.11.9.0
phpMyAdmin phpMyAdmin=2.11.9.1
phpMyAdmin phpMyAdmin=2.11.0-beta1
phpMyAdmin phpMyAdmin=2.11.2
phpMyAdmin phpMyAdmin=2.11.7
phpMyAdmin phpMyAdmin=2.11.5
phpMyAdmin phpMyAdmin=2.11.5.2
phpMyAdmin phpMyAdmin=2.11.2.2
phpMyAdmin phpMyAdmin=2.11.1-rc1
phpMyAdmin phpMyAdmin=2.11.4rc1
phpMyAdmin phpMyAdmin=2.11.5rc1
phpMyAdmin phpMyAdmin=2.11.5-rc1
phpMyAdmin phpMyAdmin=2.11.8
phpMyAdmin phpMyAdmin=2.11.4.0
phpMyAdmin phpMyAdmin=2.11.3
phpMyAdmin phpMyAdmin=2.11.2.1
phpMyAdmin phpMyAdmin=2.11.3-rc1
phpMyAdmin phpMyAdmin=2.11.0-rc1
phpMyAdmin phpMyAdmin=2.11.9.5
phpMyAdmin phpMyAdmin=2.11.6.0
phpMyAdmin phpMyAdmin=2.11.7.0
phpMyAdmin phpMyAdmin=2.11.9.6
phpMyAdmin phpMyAdmin=2.11.2.0
phpMyAdmin phpMyAdmin=2.11.9.2
phpMyAdmin phpMyAdmin=2.11.9.3
phpMyAdmin phpMyAdmin=2.11.4-rc1
phpMyAdmin phpMyAdmin=2.11.1.1
phpMyAdmin phpMyAdmin=2.11.6
phpMyAdmin phpMyAdmin=2.11.9
phpMyAdmin phpMyAdmin=2.11.0beta1
phpMyAdmin phpMyAdmin=2.11.9.4
phpMyAdmin phpMyAdmin=2.11.3.0
phpMyAdmin phpMyAdmin=2.11.0.0
phpMyAdmin phpMyAdmin=2.11.6-rc1
phpMyAdmin phpMyAdmin=2.11.1.0
phpMyAdmin phpMyAdmin=2.11.0
Remediation
Patch Available
Event History
Jan 19, 2010
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 17, 2022
Advisory Published
via GitHub·05:44 AM
Frequently Asked Questions
1
What is the severity of CVE-2008-7252?
CVE-2008-7252 has an unknown impact and attack vectors due to predictable filenames for temporary files in phpMyAdmin.
2
How do I fix CVE-2008-7252?
To fix CVE-2008-7252, upgrade phpMyAdmin to version 2.11.10 or later.
3
Which versions of phpMyAdmin are affected by CVE-2008-7252?
CVE-2008-7252 affects phpMyAdmin versions 2.11.x before 2.11.10.
4
What files are involved in the CVE-2008-7252 vulnerability?
The vulnerability is related to the libraries/File.class.php file in phpMyAdmin.
5
Is there a workaround for CVE-2008-7252 if I cannot upgrade phpMyAdmin?
There is no known workaround for CVE-2008-7252, and upgrading is the recommended mitigation.