Back

CVE-2001-0478

Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.

Published: Jun 27, 2001 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
phpmyadmin phpmyadmin *

GitHub Security Advisory GHSA-4jh6-gh8q-jcwr

Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 4.82%

Top 9% most likely to be exploited

Threat Score 31.4 / 100

Data Sources

NVD EPSS GitHub