Vulnerabilities > Phpmyadmin > Phpmyadmin > 3.0.1.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2009-03-26 | CVE-2009-1149 | Improper Input Validation vulnerability in PHPmyadmin CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters. | 7.5 |
| 2009-03-26 | CVE-2009-1148 | Path Traversal vulnerability in PHPmyadmin Directory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file_path parameter ($filename variable). | 5.0 |