Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-2506HistoryJul 14, 2011 - 11:55 p.m.
CVE-2011-2506
2011-07-1423:55:04
Debian Security Bug Tracker
security-tracker.debian.org
15
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.199
Percentile
96.3%
setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpmyadmin | < 4:3.4.3.1-1 | phpmyadmin_4:3.4.3.1-1_all.deb |
| Debian | 11 | all | phpmyadmin | < 4:3.4.3.1-1 | phpmyadmin_4:3.4.3.1-1_all.deb |
| Debian | 999 | all | phpmyadmin | < 4:3.4.3.1-1 | phpmyadmin_4:3.4.3.1-1_all.deb |
| Debian | 13 | all | phpmyadmin | < 4:3.4.3.1-1 | phpmyadmin_4:3.4.3.1-1_all.deb |
Related
phpmyadmin
phpmyadmin
checkpoint_advisories
checkpoint_advisories
PhpMyAdmin Sweky Remote Code Injection Exploit (CVE-2011-2506)
2013-10-20 00:00:00
ubuntucve
ubuntucve
CVE-2011-2506
2011-07-14 00:00:00
cve
cve
CVE-2011-2506
2011-07-14 23:55:04
nvd
nvd
CVE-2011-2506
2011-07-14 23:55:04
osv
osv
phpMyAdmin vulnerable to static code injection
2022-05-14 02:55:16
phpymadmin - several
2011-07-26 00:00:00
prion
prion
Code injection
2011-07-14 23:55:00
github
github
phpMyAdmin vulnerable to static code injection
2022-05-14 02:55:16
cvelist
cvelist
CVE-2011-2506
2011-07-14 23:00:00
seebug
seebug
phpMyAdmin3 (pma3) Remote Code Execution Exploit
2011-07-10 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection Exploit
2011-07-09 00:00:00
phpMyAdmin 3.x 多个安全漏洞
2011-07-07 00:00:00
packetstorm
packetstorm
phpMyAdmin3 Remote Code Execution
2011-07-09 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin 3.x Remote Code Execution
2011-07-08 00:00:00
exploitpack
exploitpack
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
zdt
zdt
phpMyAdmin 3.x Swekey Remote Code Injection Exploit
2011-07-09 00:00:00
exploitdb
exploitdb
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
dsquare
dsquare
Phpmyadmin 3.x RCE
2012-01-26 00:00:00
securityvulns
securityvulns
phpMyAdmin 3.x Multiple Remote Code Executions
2011-07-13 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-07-13 00:00:00
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-08-01 00:00:00
openvas
openvas
FreeBSD Ports: phpmyadmin
2011-08-03 00:00:00
Fedora Update for phpMyAdmin FEDORA-2011-9144
2011-07-18 00:00:00
phpMyAdmin < 3.3.10.2, 3.4.x < 3.4.3.1 Multiple Remote Vulnerabilities
2011-07-11 00:00:00
nessus
nessus
freebsd
freebsd
phpmyadmin -- multiple vulnerabilities
2011-07-02 00:00:00
debian
debian
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-07-26 19:11:55
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2012-01-04 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.199
Percentile
96.3%
Related for DEBIANCVE:CVE-2011-2506