Local File Leakage Risk in phpMyAdmin by phpMyAdmin
CVE-2018-19968

6.5MEDIUM

Key Information:

Vendor
PHPmyadmin
Status
PHPmyadmin
Vendor
CVE Published:
11 December 2018

Summary

A security flaw in phpMyAdmin prior to version 4.8.4 allows an attacker with valid credentials to exploit the transformation feature, potentially leaking sensitive content from local files. This vulnerability requires the attacker to access the phpMyAdmin Configuration Storage tables, which can be established within any accessible database, thus emphasizing the importance of securing database access and management interfaces.

References

http://www.securityfocus.com/bid/106178
vdb-entryx_refsource_BID
https://www.phpmyadmin.net/security/PMASA-2018-6/
x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019/02/msg0...
mailing-listx_refsource_MLIST

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.