Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-1149HistoryMar 04, 2008 - 11:44 p.m.
CVE-2008-1149
2008-03-0423:44:00
Debian Security Bug Tracker
security-tracker.debian.org
19
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS
0.003
Percentile
66.4%
phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery (CSRF) attacks by using crafted cookies.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpmyadmin | < 4:2.11.5-1 | phpmyadmin_4:2.11.5-1_all.deb |
| Debian | 11 | all | phpmyadmin | < 4:2.11.5-1 | phpmyadmin_4:2.11.5-1_all.deb |
| Debian | 999 | all | phpmyadmin | < 4:2.11.5-1 | phpmyadmin_4:2.11.5-1_all.deb |
| Debian | 13 | all | phpmyadmin | < 4:2.11.5-1 | phpmyadmin_4:2.11.5-1_all.deb |
Related
openvas
openvas
Gentoo Security Advisory GLSA 200803-15 (phpmyadmin)
2008-09-24 00:00:00
FreeBSD Ports: phpmyadmin
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200803-15 (phpmyadmin)
2008-09-24 00:00:00
prion
prion
Cross site request forgery (csrf)
2008-03-04 23:44:00
nessus
nessus
FreeBSD : phpmyadmin -- SQL injection vulnerability (ce2f2ade-e7df-11dc-a701-000bcdc1757a)
2008-03-07 00:00:00
Fedora 8 : phpMyAdmin-2.11.5-1.fc8 (2008-2189)
2008-03-07 00:00:00
GLSA-200803-15 : phpMyAdmin: SQL injection vulnerability
2008-03-13 00:00:00
cvelist
cvelist
CVE-2008-1149
2008-03-04 23:00:00
securityvulns
securityvulns
[ GLSA 200803-15 ] phpMyAdmin: SQL injection vulnerability
2008-03-10 00:00:00
[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities
2008-04-27 00:00:00
gentoo
gentoo
phpMyAdmin: SQL injection vulnerability
2008-03-09 00:00:00
ubuntucve
ubuntucve
CVE-2008-1149
2008-03-04 00:00:00
phpmyadmin
phpmyadmin
SQL injection vulnerability (Delayed Cross Site Request Forgery)
2008-03-01 00:00:00
freebsd
freebsd
phpmyadmin -- SQL injection vulnerability
2008-03-01 00:00:00
cve
cve
CVE-2008-1149
2008-03-04 23:44:00
nvd
nvd
CVE-2008-1149
2008-03-04 23:44:00
debian
debian
[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities
2008-04-24 20:32:28
osv
osv
phpmyadmin - several vulnerabilities
2008-04-24 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS
0.003
Percentile
66.4%
Related for DEBIANCVE:CVE-2008-1149