CVE detail
CVE-2008-4455 — CVE-2008-4455
Published 2008-10-06 · Modified 2026-06-16 · Vendor mysql_quick_admin · Product mysql_quick_admin · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0193
EPSS probability
exploitation probability, 30d
78.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the language cookie.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References