CVE-2009-1285

2009-04-1615:12:57

CWE-94

mitre

web.nvd.nist.gov

cve-2009-1285

static code injection

phpmyadmin

configuration files

vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.029

Percentile

90.9%

JSON

Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files.

Affected configurations

Nvd

Node

phpmyadminphpmyadminMatch3.0.0

phpmyadminphpmyadminMatch3.0.1

phpmyadminphpmyadminMatch3.1.0

phpmyadminphpmyadminMatch3.1.0.0

phpmyadminphpmyadminMatch3.1.1

phpmyadminphpmyadminMatch3.1.1rc1

phpmyadminphpmyadminMatch3.1.2

phpmyadminphpmyadminMatch3.1.2rc1

phpmyadminphpmyadminMatch3.1.3

phpmyadminphpmyadminMatch3.1.31

phpmyadminphpmyadminMatch3.1.3rc1

phpmyadminphpmyadminMatch3.1.3.1

VendorProductVersionCPE
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.2cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.2cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.3cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.3cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyadmin	phpmyadmin	3.0.0	cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:::::::*
phpmyadmin	phpmyadmin	3.0.1	cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:::::::*
phpmyadmin	phpmyadmin	3.1.0	cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:::::::*
phpmyadmin	phpmyadmin	3.1.0.0	cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:::::::*
phpmyadmin	phpmyadmin	3.1.1	cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:::::::*
phpmyadmin	phpmyadmin	3.1.1	cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:rc1::::::
phpmyadmin	phpmyadmin	3.1.2	cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:::::::*
phpmyadmin	phpmyadmin	3.1.2	cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2:rc1::::::
phpmyadmin	phpmyadmin	3.1.3	cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:::::::*
phpmyadmin	phpmyadmin	3.1.3	cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3:1::::::