PT-2011-4041 · Phpmyadmin · Phpmyadmin
CVE-2011-2719
·
Published
2011-08-01
·
Updated
2023-02-13
CVSS v2.0
6.4
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
phpMyAdmin versions 3.x prior to 3.3.10.3
phpMyAdmin versions 3.4.x prior to 3.4.3.2
Description
The issue is related to the management of sessions associated with Swekey authentication in the phpMyAdmin software. This allows remote attackers to modify certain superglobal arrays and local variables via a crafted query string.
Recommendations
For phpMyAdmin versions 3.x prior to 3.3.10.3, update to version 3.3.10.3 or later.
For phpMyAdmin versions 3.4.x prior to 3.4.3.2, update to version 3.4.3.2 or later.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Phpmyadmin