Description
An issue was discovered in phpMyAdmin involving the %u username replacement functionality of the SaveDir and UploadDir features. When the username substitution is configured, a specially-crafted user name can be used to circumvent restrictions to traverse the file system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Remediation
References
Related Vulnerabilities
SugarCRM Other Vulnerability (CVE-2006-6712)
WordPress Plugin WP Fastest Cache Cross-Site Scripting (0.8.5.5)
WordPress Plugin Slimstat Analytics SQL Injection (3.9.5)
WordPress Plugin MAC PHOTO GALLERY Multiple Security Bypass Vulnerabilities (3.0)
WordPress Plugin blogVault Real-time Backup PHP Object Injection (1.44)