CVE-2011-2718
Summary
| CVE | CVE-2011-2718 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-08-01 19:55:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
SingleConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:M/Au:S/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Phpmyadmin | Phpmyadmin | 3.4.0.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 3.4.1.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 3.4.2.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 3.4.3.0 | All | All | All |
| Application | Phpmyadmin | Phpmyadmin | 3.4.3.1 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12 | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Patch |
| Fedora update for phpMyAdmin - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Bug 725383 – CVE-2011-2718 phpMyAdmin: v3.3.10.3, v3.4.3.2: Local file inclusion and code execution in 'relational schema' code (PMASA-2011-11) | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Patch |
| phpMyAdmin / None tools | af854a3a-2127-422b-91ae-364da2661108 | phpmyadmin.git.sourceforge.net | |
| oss-security - Re: CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12 | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Patch |
| phpMyAdmin Multiple Vulnerabilities - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| phpMyAdmin - Security - PMASA-2011-11 | af854a3a-2127-422b-91ae-364da2661108 | www.phpmyadmin.net | Patch, Vendor Advisory |
| [SECURITY] Fedora 15 Update: phpMyAdmin-3.4.3.2-1.fc15 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| osvdb.org/74111 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| [SECURITY] Fedora 14 Update: phpMyAdmin-3.4.3.2-1.fc14 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| phpMyAdmin Prior to 3.3.10.3 and 3.4.3.2 Multiple Remote Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Security Advisories | Mandriva Linux | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| phpMyAdmin / None tools | MITRE | phpmyadmin.git.sourceforge.net | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 996703 PHP (Composer) Security Update for phpmyadmin/phpmyadmin (GHSA-xhqq-554j-p4x8)