VulnerabilityModified

CVE-2001-0479

Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a ..

HIGH 7.5EPSS 5.86%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (5.86%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 5.86% probability · 93th percentile
CISA KEV: Not listed
Affected: phppgadmin/phppgadmin
Source: cve@mitre.org

References

http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.htmlPatch, Vendor Advisory
http://www.greatbridge.org/project/phppgadmin/cvs/checkout.php/phpPgAdmin/ChangeLog?r=1.13URL Repurposed
http://www.securityfocus.com/bid/2640Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.htmlPatch, Vendor Advisory
http://www.greatbridge.org/project/phppgadmin/cvs/checkout.php/phpPgAdmin/ChangeLog?r=1.13URL Repurposed
http://www.securityfocus.com/bid/2640Patch, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.