CVE-2011-2508: phpMyAdmin Directory Traversal Vulnerability
Summary
CVE-2011-2508: phpMyAdmin Directory Traversal vulnerability. Affects phpmyadmin/phpmyadmin across 2 version ranges.
>= 3.3.0, < 3.3.10.2
>= 3.4.0, < 3.4.3.1
Fixed in 3.3.10.2 or 3.4.3.1, depending on the release line you run. How to fix ↓
Also tracked for
- phpmyadmin · Debian:11
The same CVE-2011-2508 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
phpMyAdmin is a widely-used open-source tool for managing MySQL databases through a web interface. It allows users to perform various database operations such as creating, modifying, and deleting databases and tables. The tool is known for its user-friendly interface and extensive features, but it has been found to have vulnerabilities, including a directory traversal issue that can be exploited by authenticated users.
Vulnerability Detail
The directory traversal vulnerability in phpMyAdmin exists in the libraries/display_tbl.lib.php file, affecting versions 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1. When a specific MIME transformation feature is enabled, it allows remote authenticated users to include and execute arbitrary local files by manipulating the GLOBALS[mime_map][$meta->name][transformation] parameter with a '..' (dot dot) sequence. This can lead to unauthorized access to sensitive files on the server, potentially compromising the entire system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 3.3.0, < 3.3.10.23.3.10.2composer require phpmyadmin/phpmyadmin:3.3.10.2 -
>= 3.4.0, < 3.4.3.13.4.3.1composer require phpmyadmin/phpmyadmin:3.4.3.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If you cannot immediately update phpMyAdmin, consider disabling the MIME transformation feature in your configuration to prevent exploitation of this vulnerability. This can typically be done by modifying the configuration file to turn off the feature until a proper update can be applied.
Conclusion
The directory traversal vulnerability in phpMyAdmin poses a significant risk to users of affected versions. It is crucial to update to the latest patched versions to secure your application. Additionally, utilizing tools like Vulert can help monitor for vulnerabilities in real-time.
See every vulnerability recorded for phpmyadmin/phpmyadmin →
FAQ
A directory traversal vulnerability allows an attacker to access files and directories that are stored outside the web document root. This can lead to unauthorized access to sensitive information.
Any user of phpMyAdmin versions 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 with the MIME transformation feature enabled is at risk.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application using the Vulert playground at Vulert Scanner without any signup.
Exploitation of this vulnerability can lead to unauthorized access to sensitive files on the server, which may compromise the integrity and confidentiality of the system.
Yes, temporarily disabling the MIME transformation feature can help mitigate the risk until you can apply the necessary updates.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin/phpmyadmin.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
