CVE-2008-1924
EPSS 0.20%Published: 4/23/2008Modified: 5/7/2026
Description
Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.
Affected packages (1)
- Debian/phpmyadminfrom 0, < 4:2.11.5.2-1