CVE-2005-3300 - Vulnerability Details - OpenCVE

The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Phpmyadmin	Phpmyadmin

Configuration 1 [-]

cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478.
http://marc.info/?l=bugtraq&m=113017591414699&w=2
http://secunia.com/advisories/17289/
http://secunia.com/advisories/17337
http://secunia.com/advisories/17559
http://secunia.com/advisories/17607
http://securitytracker.com/id?1015091
http://www.debian.org/security/2005/dsa-880
http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml
http://www.hardened-php.net/advisory_162005.73.html
http://www.novell.com/linux/security/advisories/2005_28_sr.html
http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5
http://www.securityfocus.com/bid/15169
https://exchange.xforce.ibmcloud.com/vulnerabilities/22835

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-10-23T04:00:00

Updated: 2024-08-07T23:10:07.547Z

Reserved: 2005-10-23T00:00:00

Link: CVE-2005-3300

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-10-23T21:02:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-3300

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-10-22T00:00:00", "descriptions": [{"lang": "en", "value": "The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "SUSE-SR:2005:028", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2005_28_sr.html"}, {"name": "SUSE-SA:2005:066", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html"}, {"name": "17607", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17607"}, {"name": "20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478."}, {"name": "17559", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17559"}, {"tags": ["x_refsource_MISC"], "url": "http://www.hardened-php.net/advisory_162005.73.html"}, {"name": "20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=113017591414699&w=2"}, {"name": "phpmyadmin-multiple-scripts-file-include(22835)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22835"}, {"name": "DSA-880", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2005/dsa-880"}, {"name": "17337", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17337"}, {"name": "15169", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15169"}, {"name": "GLSA-200510-21", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5"}, {"name": "17289", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17289/"}, {"name": "1015091", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015091"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3300", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "SUSE-SR:2005:028", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2005_28_sr.html"}, {"name": "SUSE-SA:2005:066", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html"}, {"name": "17607", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17607"}, {"name": "20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability", "refsource": "FULLDISC", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478."}, {"name": "17559", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17559"}, {"name": "http://www.hardened-php.net/advisory_162005.73.html", "refsource": "MISC", "url": "http://www.hardened-php.net/advisory_162005.73.html"}, {"name": "20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=113017591414699&w=2"}, {"name": "phpmyadmin-multiple-scripts-file-include(22835)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22835"}, {"name": "DSA-880", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2005/dsa-880"}, {"name": "17337", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17337"}, {"name": "15169", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15169"}, {"name": "GLSA-200510-21", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml"}, {"name": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5", "refsource": "CONFIRM", "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5"}, {"name": "17289", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17289/"}, {"name": "1015091", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015091"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:10:07.547Z"}, "title": "CVE Program Container", "references": [{"name": "SUSE-SR:2005:028", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2005_28_sr.html"}, {"name": "SUSE-SA:2005:066", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html"}, {"name": "17607", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17607"}, {"name": "20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478."}, {"name": "17559", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17559"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.hardened-php.net/advisory_162005.73.html"}, {"name": "20051022 Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=113017591414699&w=2"}, {"name": "phpmyadmin-multiple-scripts-file-include(22835)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22835"}, {"name": "DSA-880", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2005/dsa-880"}, {"name": "17337", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17337"}, {"name": "15169", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15169"}, {"name": "GLSA-200510-21", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5"}, {"name": "17289", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17289/"}, {"name": "1015091", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015091"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3300", "datePublished": "2005-10-23T04:00:00", "dateReserved": "2005-10-23T00:00:00", "dateUpdated": "2024-08-07T23:10:07.547Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.4_pl3:*:*:*:*:*:*:*", "matchCriteriaId": "6758F7AC-0FCF-4F6C-8F40-DDF1BA998AB9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use grab_globals.php, then modifying certain configuration values for the theme."}], "id": "CVE-2005-3300", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-10-23T21:02:00.000", "references": [{"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478."}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=113017591414699&w=2"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17289/"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17337"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17559"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/17607"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015091"}, {"source": "cve@mitre.org", "url": "http://www.debian.org/security/2005/dsa-880"}, {"source": "cve@mitre.org", "url": "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.hardened-php.net/advisory_162005.73.html"}, {"source": "cve@mitre.org", "url": "http://www.novell.com/linux/security/advisories/2005_28_sr.html"}, {"source": "cve@mitre.org", "url": "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/15169"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22835"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0478."}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=113017591414699&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17289/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17337"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17559"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/17607"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015091"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2005/dsa-880"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.gentoo.org/security/en/glsa/glsa-200510-21.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.hardened-php.net/advisory_162005.73.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.novell.com/linux/security/advisories/2005_28_sr.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.novell.com/linux/security/advisories/2005_66_phpmyadmin.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15169"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22835"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}