Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-3055HistoryAug 24, 2010 - 8:00 p.m.
CVE-2010-3055
2010-08-2420:00:01
Debian Security Bug Tracker
security-tracker.debian.org
14
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.101
Percentile
94.9%
The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpmyadmin | < 4:3.0.0 | phpmyadmin_4:3.0.0_all.deb |
| Debian | 11 | all | phpmyadmin | < 4:3.0.0 | phpmyadmin_4:3.0.0_all.deb |
| Debian | 999 | all | phpmyadmin | < 4:3.0.0 | phpmyadmin_4:3.0.0_all.deb |
| Debian | 13 | all | phpmyadmin | < 4:3.0.0 | phpmyadmin_4:3.0.0_all.deb |
Related
cve
cve
CVE-2010-3055
2010-08-24 20:00:01
ubuntucve
ubuntucve
CVE-2010-3055
2010-08-24 00:00:00
prion
prion
Cross site request forgery (csrf)
2010-08-24 20:00:00
openvas
openvas
Debian: Security Advisory (DSA-2097-1)
2010-10-10 00:00:00
Debian Security Advisory DSA 2097-2 (phpmyadmin)
2010-10-10 00:00:00
nessus
nessus
phpMyAdmin setup.php Arbitrary PHP Code Execution (PMASA-2010-4)
2010-08-27 00:00:00
Debian DSA-2097-1 : phpmyadmin - insufficient input sanitising
2010-08-30 00:00:00
GLSA-201201-01 : phpMyAdmin: Multiple vulnerabilities
2012-01-05 00:00:00
cvelist
cvelist
CVE-2010-3055
2010-08-24 19:00:00
phpmyadmin
phpmyadmin
Insufficient output sanitizing when generating configuration file.
2010-08-20 00:00:00
nvd
nvd
CVE-2010-3055
2010-08-24 20:00:01
securityvulns
securityvulns
debian
debian
[SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities
2010-08-29 10:26:56
[SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities
2010-09-11 14:36:05
osv
osv
phpmyadmin - several vulnerabilities
2010-08-29 00:00:00
phpmyadmin - several vulnerabilities
2010-08-29 00:00:00
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2012-01-04 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.101
Percentile
94.9%
Related for DEBIANCVE:CVE-2010-3055