Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
Name CVE-2014-8959 First vendor Publication 2014-11-30
Vendor Cve Last vendor Modification 2018-10-30

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:P/I:P/A:P)
Cvss Base Score 6.5 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Directory traversal vulnerability in libraries/gis/GIS_Factory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authenticated users to include and execute arbitrary local files via a crafted geometry-type parameter.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8959

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 56
Os 3

Nessus® Vulnerability Scanner

Date Description
2015-06-01 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201505-03.nasl - Type : ACT_GATHER_INFO
2014-12-07 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15588.nasl - Type : ACT_GATHER_INFO
2014-12-06 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2014-735.nasl - Type : ACT_GATHER_INFO
2014-12-02 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15535.nasl - Type : ACT_GATHER_INFO
2014-12-02 Name : The remote Fedora host is missing a security update.
File : fedora_2014-15538.nasl - Type : ACT_GATHER_INFO
2014-11-27 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2014-228.nasl - Type : ACT_GATHER_INFO
2014-11-27 Name : The remote web server hosts a PHP application that is affected by multiple vu...
File : phpmyadmin_pmasa_2014_16.nasl - Type : ACT_GATHER_INFO
2014-11-24 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_a5d4a82a715311e488c76805ca0b3d42.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/71247
CONFIRM http://www.phpmyadmin.net/home_page/security/PMASA-2014-14.php
https://github.com/phpmyadmin/phpmyadmin/commit/80cd40b6687a6717860d345d6eb55...
GENTOO https://security.gentoo.org/glsa/201505-03
MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2014:228
SUSE http://lists.opensuse.org/opensuse-updates/2014-12/msg00017.html

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Date Informations
2021-05-04 12:35:06
  • Multiple Updates
2021-04-22 01:42:40
  • Multiple Updates
2020-05-23 00:42:51
  • Multiple Updates
2018-10-31 00:20:40
  • Multiple Updates
2018-01-26 12:05:51
  • Multiple Updates
2016-12-31 09:24:22
  • Multiple Updates
2016-12-22 09:23:41
  • Multiple Updates
2016-09-08 00:22:44
  • Multiple Updates
2015-06-02 13:27:51
  • Multiple Updates
2015-04-01 09:26:50
  • Multiple Updates
2014-12-17 21:24:49
  • Multiple Updates
2014-12-12 09:24:54
  • Multiple Updates
2014-12-08 13:26:24
  • Multiple Updates
2014-12-07 13:26:19
  • Multiple Updates
2014-12-05 21:27:27
  • Multiple Updates
2014-12-03 13:28:24
  • Multiple Updates
2014-12-01 17:25:22
  • Multiple Updates
2014-11-30 17:25:31
  • First insertion