CVE-2008-7251 Misconfiguration in n/a

Critical 10.0 Published 19 Jan 2010 Updated 7 Aug 2024

phpMyAdmin creates temporary directories with world-writable permissions, potentially allowing attackers to read or modify sensitive data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2008-7251?

CVE-2008-7251 is a critical vulnerability in Phpmyadmin Phpmyadmin, published on 19 Jan 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.

Weakness: CWE-264

Which versions are affected by CVE-2008-7251?

It affects 1 product.

Products include Phpmyadmin Phpmyadmin.

How do I fix CVE-2008-7251?

Upgrade to a fixed version.

Is CVE-2008-7251 being exploited?

There is no known exploitation of CVE-2008-7251 in the wild and no public exploit code.

All Phpmyadmin Phpmyadmin vulnerabilities

Sources

Also known as DEBIAN-CVE-2008-7251, GHSA-q22m-2g7f-xqm5.