CVE-2011-2508: Path Traversal
Directory traversal vulnerability in libraries/displaytbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in a GLOBALS[mimemap][$meta->name][transformation] parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2508?
The severity of CVE-2011-2508 is generally considered high due to its potential for remote code execution.
How do I fix CVE-2011-2508?
To fix CVE-2011-2508, upgrade phpMyAdmin to version 3.3.10.2 or later, or 3.4.3.1 or later.
Who is affected by CVE-2011-2508?
CVE-2011-2508 affects phpMyAdmin versions 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1.
Can CVE-2011-2508 be exploited without authentication?
No, CVE-2011-2508 requires remote authenticated access to exploit the vulnerability.
What kind of attack can CVE-2011-2508 enable?
CVE-2011-2508 can enable arbitrary local file inclusion and execution of code on the server.