CVE-2011-2718: phpMyAdmin Directory Traversal Vulnerability
Summary
CVE-2011-2718: phpMyAdmin Directory Traversal Vulnerability. Affects phpmyadmin/phpmyadmin versions >= 3.4, < 3.4.3.2. Fixed in 3.4.3.2. How to fix ↓
Also tracked for
- phpmyadmin · Debian:11
The same CVE-2011-2718 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a popular web-based administration tool for managing MySQL databases. It provides a user-friendly interface for performing various database operations such as creating tables, executing queries, and managing user permissions. The vulnerability in question affects phpMyAdmin versions 3.4.x before 3.4.3.2. This vulnerability allows remote authenticated users to include and execute arbitrary local files by exploiting directory traversal vulnerabilities in the relational schema implementation. The affected files include 'libraries/schema/User_Schema.class.php' and 'schema_export.php'.
Vulnerability Detail
The directory traversal vulnerabilities in phpMyAdmin's relational schema implementation enable remote authenticated users to manipulate the export type field and include arbitrary local files. By crafting specific directory traversal sequences, an attacker can bypass file path restrictions and execute malicious code on the server. This can lead to unauthorized access, data leakage, and potential compromise of the entire system. The severity of this vulnerability is considered moderate.
How To Fix
Minimum fixed version
3.4.3.2
This is the first release that contains the fix.
composer require phpmyadmin/phpmyadmin:3.4.3.2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately feasible, a temporary workaround is to restrict access to phpMyAdmin from untrusted networks or users. This can be achieved by implementing network-level access controls or using a firewall to limit connections to the phpMyAdmin interface. Additionally, it is crucial to regularly monitor server logs for any suspicious activity and promptly investigate any potential security incidents.
Conclusion
The phpMyAdmin directory traversal vulnerability (CVE-2011-2718) allows remote authenticated users to include and execute arbitrary local files. It is crucial to upgrade to the latest version of phpMyAdmin (3.4.3.2 or later) to mitigate this vulnerability. Restricting access to phpMyAdmin and monitoring server logs can serve as temporary measures until the upgrade is performed. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for phpmyadmin/phpmyadmin →
FAQ
phpMyAdmin is a web-based administration tool for managing MySQL databases. It provides a graphical interface for performing various database operations.
The vulnerability affects phpMyAdmin versions 3.4.x before 3.4.3.2.
An attacker with authenticated access to phpMyAdmin can manipulate the export type field to include directory traversal sequences, allowing them to execute arbitrary local files.
Exploiting this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the affected system.
A temporary workaround is to restrict access to phpMyAdmin from untrusted networks or users and regularly monitor server logs for any suspicious activity.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin/phpmyadmin.
