PT-2016-6990
CVE-2016-6614
·
تاريخ النشر
2014-05-05
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 3.1
6.8
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
phpMyAdmin versions 4.0.0 through 4.0.10.17
phpMyAdmin versions 4.4.0 through 4.4.15.8
phpMyAdmin versions 4.6.0 through 4.6.4
Description
An issue was discovered involving the %u username replacement functionality of the SaveDir and UploadDir features. When the username substitution is configured, a specially-crafted user name can be used to circumvent restrictions to traverse the file system.
Recommendations
For versions 4.0.0 through 4.0.10.17, update to version 4.0.10.17 or later.
For versions 4.4.0 through 4.4.15.8, update to version 4.4.15.8 or later.
For versions 4.6.0 through 4.6.4, update to version 4.6.4 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾