Description
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.
Remediation
References
Related Vulnerabilities
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-45371)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.14)
WordPress Plugin YITH WooCommerce Mailchimp Security Bypass (2.1.3)
WordPress Plugin Form for WordPress-Zoho Forms Cross-Site Scripting (3.0)
Plone CMS Resource Management Errors Vulnerability (CVE-2013-4188)