CVE		CVE-2008-1924
Статус		Candidate
Описание		Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows attackers with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.
Важность		Low
CVSS score		3,5
CVSS vector		(AV:N/AC:M/Au:S/C:P/I:N/A:N)
Phase		Assigned (12.04.2011)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1924
References		CONFIRM : http://www.phpmyadmin.net/home_page/security.php?i...
		DEBIAN : DSA-1557
		FRSIRT : ADV-2008-1328
		SECUNIA : 29944
		SECUNIA : 29964
SecurityVulns:		Ежедневная сводка уязвимостей безопасности в Web-приложениях (PHP, ASP, JSP, CGI, Perl)
		Ежедневная сводка уязвимостей безопасности в Web-приложениях (PHP, ASP, JSP, CGI, Perl)