CVE-2008-5587

Description

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

References

https://www.exploit-db.com/exploits/7363

https://exchange.xforce.ibmcloud.com/vulnerabilities/47140

http://www.debian.org/security/2008/dsa-1693

http://securityreason.com/securityalert/4737

http://secunia.com/advisories/33263

http://secunia.com/advisories/33014

http://lists.opensuse.org/opensuse-updates/2012-04/msg00033.html

http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS