Description

Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.

Remediation

References

CVE-2001-0478

Related Vulnerabilities

WordPress Plugin SEO Redirection-301 Redirect Manager Unspecified Vulnerability (8.7)

Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2004-0488)

WordPress Plugin Gravity Forms Unspecified Vulnerability (2.4.17)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20519)

MongoDb Insufficient Session Expiration Vulnerability (CVE-2019-2386)

Severity

High

Classification

CVE-2001-0478

Tags

Missing Update Known Vulnerabilities