FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-5587

This CVE name corresponds to:

Entered	Topic
2009-03-16	phppgadmin -- directory traversal with register_globals enabled

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-5587 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-5587
Phase	Assigned(20081216)

Description

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the _language parameter to index.php.

References

Source	Reference
MILW0RM	7363
DEBIAN	DSA-1693
SUSE	SUSE-SR:2009:004
SUSE	openSUSE-SU-2012:0493
BID	32670
SECUNIA	33014
SECUNIA	33263
SREASON	4737
XF	phppgadmin-index-file-include(47140)