CVE ID:	CVE-2011-2718
Description:	Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
Test IDs:	1.3.6.1.4.1.25623.1.0.70052   1.3.6.1.4.1.25623.1.0.70053
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2718 45365 http://secunia.com/advisories/45365 45515 http://secunia.com/advisories/45515 48874 http://www.securityfocus.com/bid/48874 74111 http://osvdb.org/74111 FEDORA-2011-9725 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html FEDORA-2011-9734 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html MDVSA-2011:124 http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 [oss-security] 20110725 CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12 http://www.openwall.com/lists/oss-security/2011/07/25/4 [oss-security] 20110726 Re: CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12 http://www.openwall.com/lists/oss-security/2011/07/26/10 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=3ae58f0cd6b89ad4767920f9b214c38d3f6d4393 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=3ae58f0cd6b89ad4767920f9b214c38d3f6d4393 http://www.phpmyadmin.net/home_page/security/PMASA-2011-11.php http://www.phpmyadmin.net/home_page/security/PMASA-2011-11.php https://bugzilla.redhat.com/show_bug.cgi?id=725383 https://bugzilla.redhat.com/show_bug.cgi?id=725383 phpmyadmin-schema-file-include(68768) https://exchange.xforce.ibmcloud.com/vulnerabilities/68768