Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2011-2506
HistoryJul 14, 2011 - 11:55 p.m.

CVE-2011-2506

2011-07-1423:55:04
CWE-94
redhat
web.nvd.nist.gov
130
cve-2011-2506
code injection
phpmyadmin
security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.199

Percentile

96.3%

JSON

setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.

Affected configurations

Nvd
Node
phpmyadminphpmyadminMatch3.0.0
OR
phpmyadminphpmyadminMatch3.0.0alpha
OR
phpmyadminphpmyadminMatch3.0.0beta
OR
phpmyadminphpmyadminMatch3.0.0rc1
OR
phpmyadminphpmyadminMatch3.0.1
OR
phpmyadminphpmyadminMatch3.0.1rc1
OR
phpmyadminphpmyadminMatch3.0.1.1
OR
phpmyadminphpmyadminMatch3.1.0
OR
phpmyadminphpmyadminMatch3.1.0beta1
OR
phpmyadminphpmyadminMatch3.1.1
OR
phpmyadminphpmyadminMatch3.1.1rc1
OR
phpmyadminphpmyadminMatch3.1.2
OR
phpmyadminphpmyadminMatch3.1.2rc1
OR
phpmyadminphpmyadminMatch3.1.3
OR
phpmyadminphpmyadminMatch3.1.3rc1
OR
phpmyadminphpmyadminMatch3.1.3.1
OR
phpmyadminphpmyadminMatch3.1.3.2
OR
phpmyadminphpmyadminMatch3.1.4
OR
phpmyadminphpmyadminMatch3.1.4rc2
OR
phpmyadminphpmyadminMatch3.1.5
OR
phpmyadminphpmyadminMatch3.1.5rc1
OR
phpmyadminphpmyadminMatch3.2.0
OR
phpmyadminphpmyadminMatch3.2.0beta1
OR
phpmyadminphpmyadminMatch3.2.0rc1
OR
phpmyadminphpmyadminMatch3.2.1
OR
phpmyadminphpmyadminMatch3.2.1rc1
OR
phpmyadminphpmyadminMatch3.2.2
OR
phpmyadminphpmyadminMatch3.2.2rc1
OR
phpmyadminphpmyadminMatch3.3.0.0
OR
phpmyadminphpmyadminMatch3.3.1.0
OR
phpmyadminphpmyadminMatch3.3.2.0
OR
phpmyadminphpmyadminMatch3.3.3.0
OR
phpmyadminphpmyadminMatch3.3.4.0
OR
phpmyadminphpmyadminMatch3.3.5.0
OR
phpmyadminphpmyadminMatch3.3.5.1
OR
phpmyadminphpmyadminMatch3.3.6
OR
phpmyadminphpmyadminMatch3.3.7
OR
phpmyadminphpmyadminMatch3.3.8
OR
phpmyadminphpmyadminMatch3.3.8.1
OR
phpmyadminphpmyadminMatch3.3.9.0
OR
phpmyadminphpmyadminMatch3.3.9.1
OR
phpmyadminphpmyadminMatch3.3.9.2
OR
phpmyadminphpmyadminMatch3.3.10.0
OR
phpmyadminphpmyadminMatch3.3.10.1
Node
phpmyadminphpmyadminMatch3.4.0.0
OR
phpmyadminphpmyadminMatch3.4.1.0
OR
phpmyadminphpmyadminMatch3.4.2.0
OR
phpmyadminphpmyadminMatch3.4.3.0
VendorProductVersionCPE
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:alpha:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:beta:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0:rc1:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1:rc1:*:*:*:*:*:*
phpmyadminphpmyadmin3.0.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.0cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0:beta1:*:*:*:*:*:*
phpmyadminphpmyadmin3.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 481

References

Related

phpmyadmin 1
checkpoint_advisories 1
osv 2
debiancve 1
prion 1
github 1
cvelist 1
ubuntucve 1
nvd 1
packetstorm 3
exploitpack 2
seebug 4
exploitdb 2
zdt 1
dsquare 1
openvas 10
securityvulns 3
nessus 5
freebsd 1
debian 1
gentoo 1
phpmyadmin
phpmyadmin
Possible code injection in setup script in case session variables are compromised.
2011-07-02 00:00:00
checkpoint_advisories
checkpoint_advisories
PhpMyAdmin Sweky Remote Code Injection Exploit (CVE-2011-2506)
2013-10-20 00:00:00
osv
osv
phpMyAdmin vulnerable to static code injection
2022-05-14 02:55:16
phpymadmin - several
2011-07-26 00:00:00
debiancve
debiancve
CVE-2011-2506
2011-07-14 23:55:04
prion
prion
Code injection
2011-07-14 23:55:00
github
github
phpMyAdmin vulnerable to static code injection
2022-05-14 02:55:16
cvelist
cvelist
CVE-2011-2506
2011-07-14 23:00:00
ubuntucve
ubuntucve
CVE-2011-2506
2011-07-14 00:00:00
nvd
nvd
CVE-2011-2506
2011-07-14 23:55:04
packetstorm
packetstorm
phpMyAdmin3 Remote Code Execution
2011-07-09 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin 3.x Remote Code Execution
2011-07-08 00:00:00
exploitpack
exploitpack
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
seebug
seebug
phpMyAdmin 3.x Swekey Remote Code Injection Exploit
2011-07-09 00:00:00
phpMyAdmin3 (pma3) Remote Code Execution Exploit
2011-07-10 00:00:00
phpMyAdmin 3.x Multiple Remote Code Executions
2011-07-09 00:00:00
exploitdb
exploitdb
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
zdt
zdt
phpMyAdmin 3.x Swekey Remote Code Injection Exploit
2011-07-09 00:00:00
dsquare
dsquare
Phpmyadmin 3.x RCE
2012-01-26 00:00:00
openvas
openvas
Fedora Update for phpMyAdmin FEDORA-2011-9144
2011-07-18 00:00:00
phpMyAdmin < 3.3.10.2, 3.4.x < 3.4.3.1 Multiple Remote Vulnerabilities
2011-07-11 00:00:00
FreeBSD Ports: phpmyadmin
2011-08-03 00:00:00
securityvulns
securityvulns
phpMyAdmin 3.x Multiple Remote Code Executions
2011-07-13 00:00:00
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2011-07-13 00:00:00
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-08-01 00:00:00
nessus
nessus
Fedora 14 : phpMyAdmin-3.4.3.1-1.fc14 (2011-9144)
2011-07-18 00:00:00
phpMyAdmin 3.3.x / 3.4.x < 3.3.10.2 / 3.4.3.1 Multiple Vulnerabilities (PMASA-2011-5 - PMASA-2011-8)
2011-12-20 00:00:00
FreeBSD : phpmyadmin -- multiple vulnerabilities (7e4e5c53-a56c-11e0-b180-00216aa06fc2)
2011-07-05 00:00:00
freebsd
freebsd
phpmyadmin -- multiple vulnerabilities
2011-07-02 00:00:00
debian
debian
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-07-26 19:11:55
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2012-01-04 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.199

Percentile

96.3%

JSON
Related for CVE-2011-2506
phpmyadmin1checkpoint_advisories1osv2debiancve1prion1github1cvelist1ubuntucve1nvd1packetstorm3exploitpack2seebug4exploitdb2zdt1dsquare1openvas10securityvulns3nessus5freebsd1debian1gentoo1