CVE-2004-0129
published 2004-03-03CVE-2004-0129: Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in…
PriorityP433medium5CVSS 2.0
AVNACLAuNCPINAN
EXPLOIT
EPSS
9.33%
94.8th percentile
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | phpmyadmin | < phpmyadmin 2:2.6.0-pl2 (bookworm) | phpmyadmin 2:2.6.0-pl2 (bookworm) |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
| phpmyadmin | phpmyadmin | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM
vendor_debian5.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f766-fjw3-vvfv: Directory traversal vulnerability in export
ghsa_unreviewed·2022-04-29
CVE-2004-0129 [MEDIUM] GHSA-f766-fjw3-vvfv: Directory traversal vulnerability in export
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.
OSV
CVE-2004-0129: Directory traversal vulnerability in export
osv·2004-03-03·CVSS 5.0
CVE-2004-0129 [MEDIUM] CVE-2004-0129: Directory traversal vulnerability in export
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.
Debian
CVE-2004-0129: phpmyadmin - Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier ...
vendor_debian·2004·CVSS 5.0
CVE-2004-0129 [MEDIUM] CVE-2004-0129: phpmyadmin - Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier ...
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.
Scope: local
bookworm: resolved (fixed in 2:2.6.0-pl2)
bullseye: resolved (fixed in 2:2.6.0-pl2)
forky: resolved (fixed in 2:2.6.0-pl2)
sid: resolved (fixed in 2:2.6.0-pl2)
trixie: resolved (fixed in 2:2.6.0-pl2)
No detection rules found.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=107582619125932&w=2http://secunia.com/advisories/10769http://security.gentoo.org/glsa/glsa-200402-05.xmlhttp://sourceforge.net/forum/forum.php?forum_id=350228http://www.osvdb.org/3800http://www.phpmyadmin.net/home_page/relnotes.php?rel=0http://www.securityfocus.com/bid/9564https://exchange.xforce.ibmcloud.com/vulnerabilities/15021http://marc.info/?l=bugtraq&m=107582619125932&w=2http://secunia.com/advisories/10769http://security.gentoo.org/glsa/glsa-200402-05.xmlhttp://sourceforge.net/forum/forum.php?forum_id=350228http://www.osvdb.org/3800http://www.phpmyadmin.net/home_page/relnotes.php?rel=0http://www.securityfocus.com/bid/9564https://exchange.xforce.ibmcloud.com/vulnerabilities/15021
2004-03-03
Published