CVE-2011-2643

Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter.

• CWE-22

• http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html
• http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=f63e1bb42a37401b2fdfcd2e66cce92b7ea2025c
• http://secunia.com/advisories/45365Vendor Advisory
• http://secunia.com/advisories/45515
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:124
• http://www.phpmyadmin.net/home_page/security/PMASA-2011-10.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/48874
• https://bugzilla.redhat.com/show_bug.cgi?id=725382Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68767
• http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html
• http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=f63e1bb42a37401b2fdfcd2e66cce92b7ea2025c
• http://secunia.com/advisories/45365Vendor Advisory
• http://secunia.com/advisories/45515
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:124
• http://www.phpmyadmin.net/home_page/security/PMASA-2011-10.phpPatch, Vendor Advisory
• http://www.securityfocus.com/bid/48874
• https://bugzilla.redhat.com/show_bug.cgi?id=725382Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68767

Published

Aug 1, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2637Unspecified vulnerability in Opera before 11.10 allows remot…
• CVE-2011-2638Unspecified vulnerability in Opera before 11.10 allows remot…
• CVE-2011-2639Opera before 11.10 does not properly handle hidden animated …
• CVE-2011-2640Opera before 11.10 allows remote attackers to cause a denial…
• CVE-2011-2641Opera 11.11 allows remote attackers to cause a denial of ser…
• CVE-2011-2642Multiple cross-site scripting (XSS) vulnerabilities in the t…
• CVE-2011-2644Cross-site scripting (XSS) vulnerability in Kiwi before 3.74…
• CVE-2011-2645Unspecified vulnerability in Kiwi before 3.74.2, as used in …
• CVE-2011-2646Unspecified vulnerability in Kiwi before 3.74.2, as used in …
• CVE-2011-2647Unspecified vulnerability in Kiwi before 3.74.2, as used in …
• CVE-2011-2648Unspecified vulnerability in Kiwi before 3.74.2, as used in …
• CVE-2011-2649Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4,…