Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-24f5-741f-rkgx
Vulnerability ID VCID-24f5-741f-rkgx
Aliases CVE-2008-7252
GHSA-9645-6g72-2pv8
Summary libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-377 Insecure Temporary File
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-310 Cryptographic Issues
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual HIGH http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
generic_textual HIGH http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11528&r2=11527&pathrev=11528
generic_textual HIGH http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11528
epss 0.0296 https://api.first.org/data/v1/epss?cve=CVE-2008-7252
epss 0.0296 https://api.first.org/data/v1/epss?cve=CVE-2008-7252
epss 0.0296 https://api.first.org/data/v1/epss?cve=CVE-2008-7252
generic_textual HIGH https://github.com/phpmyadmin/composer
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2008-7252
generic_textual HIGH https://web.archive.org/web/20100613071447/http://secunia.com/advisories/38211
generic_textual HIGH https://web.archive.org/web/20100613071509/http://secunia.com/advisories/39503
generic_textual HIGH https://web.archive.org/web/20110729050522/http://www.securityfocus.com/bid/37826
generic_textual HIGH http://www.debian.org/security/2010/dsa-2034
generic_textual HIGH http://www.phpmyadmin.net/home_page/security/PMASA-2010-2.php
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html
http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/libraries/File.class.php?r1=11528&r2=11527&pathrev=11528
http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=11528
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-7252.json
https://api.first.org/data/v1/epss?cve=CVE-2008-7252
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7252
https://github.com/phpmyadmin/composer
https://nvd.nist.gov/vuln/detail/CVE-2008-7252
https://web.archive.org/web/20100613071447/http://secunia.com/advisories/38211
https://web.archive.org/web/20100613071509/http://secunia.com/advisories/39503
https://web.archive.org/web/20110729050522/http://www.securityfocus.com/bid/37826
http://www.debian.org/security/2010/dsa-2034
http://www.phpmyadmin.net/home_page/security/PMASA-2010-2.php
557307 https://bugzilla.redhat.com/show_bug.cgi?id=557307
GHSA-9645-6g72-2pv8 https://github.com/advisories/GHSA-9645-6g72-2pv8
GLSA-201201-01 https://security.gentoo.org/glsa/201201-01
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.86741
EPSS Score 0.0296
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T17:07:09.709828+00:00 Debian Importer Import https://security-tracker.debian.org/tracker/data/json 38.6.0