phpMyAdmin Prior to 3.3.10.3 and 3.4.3.2 Multiple Remote Vulnerabilities
BID:48874
Info
phpMyAdmin Prior to 3.3.10.3 and 3.4.3.2 Multiple Remote Vulnerabilities
| Bugtraq ID: | 48874 |
| Class: | Unknown |
| CVE: |
CVE-2011-2642 CVE-2011-2643 CVE-2011-2718 CVE-2011-2719 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2011 12:00AM |
| Updated: | Apr 13 2015 09:32PM |
| Credit: | Norman Hippert, The-Wildcat.de and Frans Pehrson of Xxor AB |
| Vulnerable: |
phpMyAdmin phpMyAdmin 3.4.3 phpMyAdmin phpMyAdmin 3.3.8 phpMyAdmin phpMyAdmin 3.3.7 phpMyAdmin phpMyAdmin 3.3.6 phpMyAdmin phpMyAdmin 3.3.3 0 phpMyAdmin phpMyAdmin 3.2.2 phpMyAdmin phpMyAdmin 3.2.1 phpMyAdmin phpMyAdmin 3.2 phpMyAdmin phpMyAdmin 3.1.5 phpMyAdmin phpMyAdmin 3.1.4 phpMyAdmin phpMyAdmin 3.1.3 phpMyAdmin phpMyAdmin 3.1 phpMyAdmin phpMyAdmin 3.0.1 phpMyAdmin phpMyAdmin 3.0 RC1 phpMyAdmin phpMyAdmin 3.0 beta phpMyAdmin phpMyAdmin 3.0 alpha phpMyAdmin phpMyAdmin 3.0 phpMyAdmin phpMyAdmin 2.11.9 .6 phpMyAdmin phpMyAdmin 2.11.9 .2 phpMyAdmin phpMyAdmin 2.11.9 .1 phpMyAdmin phpMyAdmin 2.11 phpMyAdmin phpMyAdmin 3.4.3.1 phpMyAdmin phpMyAdmin 3.4.1 phpMyAdmin phpMyAdmin 3.3.9.2 phpMyAdmin phpMyAdmin 3.3.8.1 phpMyAdmin phpMyAdmin 3.3.6 phpMyAdmin phpMyAdmin 3.3.5.1 phpMyAdmin phpMyAdmin 3.3.5.0 phpMyAdmin phpMyAdmin 3.3.4.0 phpMyAdmin phpMyAdmin 3.3.2.0 phpMyAdmin phpMyAdmin 3.3.1.0 phpMyAdmin phpMyAdmin 3.3.0.0 phpMyAdmin phpMyAdmin 3.2.2 Rc1 phpMyAdmin phpMyAdmin 3.2.1 Rc1 phpMyAdmin phpMyAdmin 3.2.0-rc1 phpMyAdmin phpMyAdmin 3.2.0 Beta1 phpMyAdmin phpMyAdmin 3.1.5 Rc1 phpMyAdmin phpMyAdmin 3.1.4 Rc2 phpMyAdmin phpMyAdmin 3.1.3.2 phpMyAdmin phpMyAdmin 3.1.3.1 phpMyAdmin phpMyAdmin 3.1.3 Rc1 phpMyAdmin phpMyAdmin 3.1.2 Rc1 phpMyAdmin phpMyAdmin 3.1.2 phpMyAdmin phpMyAdmin 3.1.1 Rc1 phpMyAdmin phpMyAdmin 3.1.1 phpMyAdmin phpMyAdmin 3.1.0 Beta1 phpMyAdmin phpMyAdmin 3.0.1.1 phpMyAdmin phpMyAdmin 3.0.1 Rc1 phpMyAdmin phpMyAdmin 2.11.9.5. phpMyAdmin phpMyAdmin 2.11.9.5 phpMyAdmin phpMyAdmin 2.11.9.4 phpMyAdmin phpMyAdmin 2.11.9.3 phpMyAdmin phpMyAdmin 2.11.9.0 phpMyAdmin phpMyAdmin 2.11.8.0 phpMyAdmin phpMyAdmin 2.11.7.1 phpMyAdmin phpMyAdmin 2.11.7.0 phpMyAdmin phpMyAdmin 2.11.6.0 phpMyAdmin phpMyAdmin 2.11.5.2 phpMyAdmin phpMyAdmin 2.11.5.1 phpMyAdmin phpMyAdmin 2.11.5.0 phpMyAdmin phpMyAdmin 2.11.4.0 phpMyAdmin phpMyAdmin 2.11.3.0 phpMyAdmin phpMyAdmin 2.11.2.2 phpMyAdmin phpMyAdmin 2.11.2.1 phpMyAdmin phpMyAdmin 2.11.2.0 phpMyAdmin phpMyAdmin 2.11.10.1 phpMyAdmin phpMyAdmin 2.11.10.0 phpMyAdmin phpMyAdmin 2.11.1.2 phpMyAdmin phpMyAdmin 2.11.1.1 phpMyAdmin phpMyAdmin 2.11.1.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
phpMyAdmin phpMyAdmin 3.4.3.2 phpMyAdmin phpMyAdmin 3.3.10.3 |
Discussion
phpMyAdmin Prior to 3.3.10.3 and 3.4.3.2 Multiple Remote Vulnerabilities
phpMyAdmin is prone to multiple remote vulnerabilities, including:
1. Multiple local file-includes vulnerabilities.
2. An HTML injection vulnerability.
3. A security-vulnerability ythat may allow attackers to overwrite session variables.
Successful attacks can compromise the affected application and possibly the underlying computer, execute arbitrary script code and steal cookie-based authentication credentials. Other attacks are also possible.
phpMyAdmin versions prior to 3.3.10.3 and 3.4.3.2 are vulnerable.
phpMyAdmin is prone to multiple remote vulnerabilities, including:
1. Multiple local file-includes vulnerabilities.
2. An HTML injection vulnerability.
3. A security-vulnerability ythat may allow attackers to overwrite session variables.
Successful attacks can compromise the affected application and possibly the underlying computer, execute arbitrary script code and steal cookie-based authentication credentials. Other attacks are also possible.
phpMyAdmin versions prior to 3.3.10.3 and 3.4.3.2 are vulnerable.
Exploit / POC
phpMyAdmin Prior to 3.3.10.3 and 3.4.3.2 Multiple Remote Vulnerabilities
An attacker can exploit these issues through a browser.
An attacker can exploit these issues through a browser.