Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2014-8959
Description:Directory traversal vulnerability in libraries/gis/GIS_Factory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-8959
BugTraq ID: 71247
http://www.securityfocus.com/bid/71247
https://security.gentoo.org/glsa/201505-03
http://www.mandriva.com/security/advisories?name=MDVSA-2014:228
SuSE Security Announcement: openSUSE-SU-2014:1561 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html




© 1998-2025 E-Soft Inc. All rights reserved.