Description
Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Shortcodes-Shortcodes Ultimate Multiple Vulnerabilities (4.9.3)
WordPress Plugin Database Backup for WordPress 'edit.php' Directory Traversal (1.7)
WebLogic CVE-2024-21181 Vulnerability (CVE-2024-21181)
PrestaShop Observable Timing Discrepancy Vulnerability (CVE-2026-25597)