CVE-2005-3300

Description

The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme.

5.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 1.79% Top 20%

Vendor Advisory novell.com Vendor Advisory novell.com Vendor Advisory debian.org Vendor Advisory gentoo.org Vendor Advisory hardened-php.net Vendor Advisory phpmyadmin.net

Affected: n/a n/a

References

Link	Tags
http://www.novell.com/linux/security/advisories/2005_28_sr.html	vendor advisory
http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html	vendor advisory
http://secunia.com/advisories/17607	third party advisory
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478.	mailing list
http://secunia.com/advisories/17559	third party advisory
http://www.hardened-php.net/advisory_162005.73.html	patch vendor advisory
http://marc.info/?l=bugtraq&m=113017591414699&w=2	mailing list
https://exchange.xforce.ibmcloud.com/vulnerabilities/22835	vdb entry
http://www.debian.org/security/2005/dsa-880	vendor advisory
http://secunia.com/advisories/17337	third party advisory
http://www.securityfocus.com/bid/15169	vdb entry
http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml	vendor advisory
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5	patch vendor advisory
http://secunia.com/advisories/17289/	third party advisory
http://securitytracker.com/id?1015091	vdb entry

Frequently Asked Questions

What is the severity of CVE-2005-3300?: CVE-2005-3300 has been scored as a medium severity vulnerability.
How to fix CVE-2005-3300?: To fix CVE-2005-3300, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-3300 being actively exploited in the wild?: It is possible that CVE-2005-3300 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.