https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:20:05 +0000 https://cve.radiocsirt.org/vuln/cve-2018-12613 <p>An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the &#34;$cfg[&#39;AllowArbitraryServer&#39;] = true&#34; case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the &#34;$cfg[&#39;ServerDefault&#39;] = 0&#34; case (which bypasses the login requirement and runs the vulnerable code without any authentication).</p> <p>An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the &#34;$cfg[&#39;AllowArbitraryServer&#39;] = true&#34; case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the &#34;$cfg[&#39;ServerDefault&#39;] = 0&#34; case (which bypasses the login requirement and runs the vulnerable code without any authentication).</p> https://cve.radiocsirt.org/vuln/cve-2018-12613