Upstream information
Description
Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)
Novell/SUSE information
Novell Bugzilla entry: 383135, 410768 SUSE Security Advisories:- SUSE-SR:2008:026, published Mon, 24 Nov 2008 16:00:00 +0000
- SUSE-SR:2009:003, published Mon, 02 Feb 2009 16:30:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 10.2 |
| |
| openSUSE 10.3 |
| |
| openSUSE 10.3 |
|