Directory Traversal Vulnerability in phpMyAdmin: Remote File Inclusion Risk
Summary
CVE-2011-2508: Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to i... Affects phpmyadmin versions < 4:3.4.3.1-1. Fixed in 4:3.4.3.1-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a widely used open-source tool for managing MySQL databases through a web interface. It allows users to perform various database operations, such as creating, modifying, and deleting databases and tables, executing SQL queries, and managing user permissions. The tool is popular among developers and database administrators due to its ease of use and extensive features. However, certain versions of phpMyAdmin are vulnerable to a directory traversal issue that can lead to unauthorized file access and execution.
Vulnerability Detail
The vulnerability, identified as CVE-2011-2508, arises from a directory traversal flaw in the libraries/display_tbl.lib.php file of phpMyAdmin versions 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1. When a specific MIME transformation feature is enabled, remote authenticated users can exploit this vulnerability by manipulating the GLOBALS[mime_map][$meta->name][transformation] parameter to include and execute arbitrary local files. This can lead to unauthorized access to sensitive files on the server, potentially compromising the integrity and confidentiality of the system.
How To Fix
Minimum fixed version
4:3.4.3.1-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade phpmyadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading is not immediately possible, a temporary workaround is to disable the MIME transformation feature in the phpMyAdmin configuration. This can be done by editing the configuration file (config.inc.php) and setting the relevant transformation options to false. However, this is not a permanent solution and upgrading is strongly recommended.
Conclusion
The directory traversal vulnerability in phpMyAdmin (CVE-2011-2508) poses a significant risk to users of affected versions. It is crucial to upgrade to a secure version to mitigate the risk of unauthorized file access and execution. Users should also consider utilizing tools like Vulert for ongoing vulnerability monitoring.
See every vulnerability recorded for phpmyadmin →
FAQ
CVE-2011-2508 is a directory traversal vulnerability in phpMyAdmin that allows remote authenticated users to include and execute arbitrary local files.
The vulnerability affects phpMyAdmin versions 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1.
You can check your phpMyAdmin version by logging into the interface and looking at the footer or by running the command 'phpmyadmin --version' in the terminal.
Failing to address this vulnerability can lead to unauthorized access to sensitive files on the server, which may result in data breaches or system compromise.
Vulert monitors and alerts in real-time for open-source vulnerabilities in software using a manifest file like package-lock.json. You can check if your application is affected by this vulnerability using the Vulert playground without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin.
