CVE-2013-3240

Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type.

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

5.49% chance of exploitation in the next 30 days, 92th percentile

Published

2013-04-26

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25003

References

• CVE Record
• NVD entry

Related

• CVE-2013-3239
• CVE-2013-3241
• CVE-2013-3238
• CVE-2013-3242
• CVE-2013-3215
• CVE-2013-3245