CVE-2008-5587

EPSS 12.9%

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/7363unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html http://secunia.com/advisories/33014 http://secunia.com/advisories/33263 http://securityreason.com/securityalert/4737 https://exchange.xforce.ibmcloud.com/vulnerabilities/47140 https://www.exploit-db.com/exploits/7363 http://www.debian.org/security/2008/dsa-1693 http://www.securityfocus.com/bid/32670