← Database

CVE-2008-1924

LOW CVSS: 3.5 Published: 2008-04-23 Modified: 2026-06-16

Description

Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.

Affected Platforms

Phpmyadmin Phpmyadmin

Weakness Type

CWE-200, NVD-CWE-noinfo

References