CVE-2008-7251

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.

• CWE-264

• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
• http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11536&r2=11535&pathrev=11536
• http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11536
• http://secunia.com/advisories/38211Vendor Advisory
• http://secunia.com/advisories/39503Vendor Advisory
• http://www.debian.org/security/2010/dsa-2034
• http://www.phpmyadmin.net/home_page/security/PMASA-2010-1.phpVendor Advisory
• http://www.securityfocus.com/bid/37826
• http://www.vupen.com/english/advisories/2010/0910Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
• http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11536&r2=11535&pathrev=11536
• http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11536
• http://secunia.com/advisories/38211Vendor Advisory
• http://secunia.com/advisories/39503Vendor Advisory
• http://www.debian.org/security/2010/dsa-2034
• http://www.phpmyadmin.net/home_page/security/PMASA-2010-1.phpVendor Advisory
• http://www.securityfocus.com/bid/37826
• http://www.vupen.com/english/advisories/2010/0910Vendor Advisory

Published

Jan 19, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-7245Opera 9.52 and earlier allows remote attackers to cause a de…
• CVE-2008-7246Google Chrome 0.2.149.29 and earlier allows remote attackers…
• CVE-2008-7247sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x throug…
• CVE-2008-7248Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does n…
• CVE-2008-7249Buffer overflow in Squid Analysis Report Generator (Sarg) 2.…
• CVE-2008-7250Cross-site scripting (XSS) vulnerability in Squid Analysis R…
• CVE-2008-7252libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10…
• CVE-2008-7253The default configuration of the web server in IBM Lotus Dom…
• CVE-2008-7254Directory traversal vulnerability in includes/template-loade…
• CVE-2008-7255login_screen.tcl in aMSN (aka Alvaro's Messenger) before 0.9…
• CVE-2008-7256mm/shmem.c in the Linux kernel before 2.6.28-rc8, when stric…
• CVE-2008-7257CRLF injection vulnerability in +webvpn+/index.html in WebVP…