CVE-2011-2718 phpMyAdmin Directory Traversal Vulnerability
Authenticated users can exploit directory traversal in phpMyAdmin to include and execute arbitrary local files, leading to code execution or data disclosure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-2718?
CVE-2011-2718 is a medium-severity path traversal vulnerability in Phpmyadmin Phpmyadmin, published on 1 Aug 2011. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
Weakness: CWE-22
Which versions are affected by CVE-2011-2718?
2 open source packages ship an affected version, including phpmyadmin/phpmyadmin. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
phpmyadmin/phpmyadmin Packagist | From 3.4 | 3.4.3.2 |
phpmyadmin/phpmyadmin Packagist | From 3.4 | 3.4.3.2 |
Products include Phpmyadmin Phpmyadmin.
How do I fix CVE-2011-2718?
Upgrade phpmyadmin/phpmyadmin to 3.4.3.2 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2011-2718 being exploited?
There is no known exploitation of CVE-2011-2718 in the wild and no public exploit code.
Other vulnerabilities in Phpmyadmin Phpmyadmin
Sources
Also known as DEBIAN-CVE-2011-2718, GHSA-xhqq-554j-p4x8.