p PatchFirst

CVE-2004-1148

CVE-2004-1148

This page contains facts from public vulnerability sources. Check the original advisory before updating.

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.

EPSS 1.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • phpmyadmin Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:2.6.1-rc1-1

    Update to 2:2.6.1-rc1-1

  • phpmyadmin Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:2.6.1-rc1-1

    Update to 2:2.6.1-rc1-1

  • phpmyadmin Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:2.6.1-rc1-1

    Update to 2:2.6.1-rc1-1

Original sources

Check your server →