phpMyAdmin unsafely handles temporary files

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2008-7252 · ADVISORY
• phpmyadmin/composer · PACKAGE
• web.archive.org/web/20100613071447/http://secunia.com/advisories/38211 · WEB
• web.archive.org/web/20100613071509/http://secunia.com/advisories/39503 · WEB
• web.archive.org/web/20110729050522/http://www.securityfocus.com/bid/37826 · WEB
• lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html · WEB
• phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php · WEB
• phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin · WEB
• debian.org/security/2010/dsa-2034 · WEB
• phpmyadmin.net/home_page/security/PMASA-2010-2.php · WEB
• secunia.com/advisories/38211 · Vendor Advisory
• secunia.com/advisories/39503 · Vendor Advisory
• securityfocus.com/bid/37826 · Patch
• vupen.com/english/advisories/2010/0910 · Vendor Advisory

phpmyadmin/phpmyadmin のその他の脆弱性

• CVE-2025-24530中 6.4An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted tab…
• CVE-2023-25727中 5.4In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-an…
• CVE-2020-22452緊急 9.8SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engin…
• CVE-2022-0813高 7.5PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the …
• CVE-2022-23808中 6.1An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can al…