PT-2011-4041 · Phpmyadmin · Phpmyadmin
CVE-2011-2719
·
Publicado
2011-08-01
·
Atualizado
2023-02-13
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
phpMyAdmin versions 3.x prior to 3.3.10.3
phpMyAdmin versions 3.4.x prior to 3.4.3.2
Description
The issue is related to the management of sessions associated with Swekey authentication in the phpMyAdmin software. This allows remote attackers to modify certain superglobal arrays and local variables via a crafted query string.
Recommendations
For phpMyAdmin versions 3.x prior to 3.3.10.3, update to version 3.3.10.3 or later.
For phpMyAdmin versions 3.4.x prior to 3.4.3.2, update to version 3.4.3.2 or later.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpmyadmin