Directory Traversal Vulnerability in phpMyAdmin: Remote File Inclusion Risk
Summary
CVE-2011-2718: Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversa... Affects phpmyadmin versions < 4:3.4.3.2-1. Fixed in 4:3.4.3.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a widely used open-source tool for managing MySQL databases through a web interface. It provides a user-friendly way to perform database operations such as creating, modifying, and deleting databases and tables. However, certain versions of phpMyAdmin, specifically 3.4.x before 3.4.3.2, are vulnerable to directory traversal attacks, which can allow unauthorized access to sensitive files on the server.
Vulnerability Detail
The vulnerability arises from multiple directory traversal flaws in the relational schema implementation of phpMyAdmin. Authenticated remote users can exploit these vulnerabilities by manipulating the export type field to include and execute arbitrary local files. This can lead to unauthorized access to sensitive information and potential server compromise. The affected files include libraries/schema/User_Schema.class.php and schema_export.php, which are critical components of the phpMyAdmin export functionality.
How To Fix
Minimum fixed version
4:3.4.3.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade phpmyadminTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the phpMyAdmin interface by implementing IP whitelisting or using a web application firewall (WAF) to block unauthorized access until the software can be updated.
Conclusion
The directory traversal vulnerability in phpMyAdmin versions 3.4.x before 3.4.3.2 poses a significant risk to users, allowing unauthorized file access through manipulated export fields. It is crucial to upgrade to the latest version to mitigate this risk and ensure the security of your database management system.
See every vulnerability recorded for phpmyadmin →
FAQ
A directory traversal vulnerability allows an attacker to access files and directories that are stored outside the intended directory. This can lead to unauthorized file access and execution.
Check the version of phpMyAdmin you are using. If it is 3.4.x and prior to 3.4.3.2, it is vulnerable. You can also use tools like Vulert to monitor for vulnerabilities.
Exploitation of this vulnerability can lead to unauthorized access to sensitive files, potential data breaches, and server compromise.
Yes, you can use Vulert, which monitors open-source vulnerabilities in real-time using just a manifest file like package-lock.json. You can check your application for vulnerabilities at the Vulert playground.
Implement access restrictions and monitor your application closely for any suspicious activity until you can perform the upgrade.
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin.
