CVE-2008-4454

Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the lang parameter to actions.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

• CWE-22

• http://secunia.com/advisories/31820Vendor Advisory
• http://secunia.com/advisories/31820Vendor Advisory

Published

Oct 6, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4448Cross-site request forgery (CSRF) vulnerability in actions.p…
• CVE-2008-4449Stack-based buffer overflow in mIRC 6.34 allows remote attac…
• CVE-2008-4450Cross-site scripting (XSS) vulnerability in adodb.php in XAM…
• CVE-2008-4451The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535…
• CVE-2008-4452Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2…
• CVE-2008-4453The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Im…
• CVE-2008-4455Directory traversal vulnerability in index.php in EKINdesign…
• CVE-2008-4456Cross-site scripting (XSS) vulnerability in the command-line…
• CVE-2008-4457SQL injection vulnerability in inc/inc_statistics.php in Mem…
• CVE-2008-4458SQL injection vulnerability in listings.php in E-Php B2B Tra…
• CVE-2008-4459SQL injection vulnerability in pick_users.php in the groups …
• CVE-2008-4460SQL injection vulnerability in game.php in Vastal I-Tech MMO…