Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-VQCM-R62W-W437
HistoryMay 14, 2022 - 2:55 a.m.

phpMyAdmin remote variable manipulation

2022-05-1402:55:16
CWE-94
GitHub Advisory Database
github.com
12
phpmyadmin
remote attack
variable manipulation
swekey authentication

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.14

Percentile

95.7%

JSON

libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a “remote variable manipulation vulnerability.”

Affected configurations

Vulners
Node
phpmyadminphpmyadminRange<3.4.3.1
OR
phpmyadminphpmyadminRange<3.3.10.2
VendorProductVersionCPE
phpmyadminphpmyadmin*cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*

References

Related

phpmyadmin 1
ubuntucve 2
nvd 2
cve 2
cvelist 2
checkpoint_advisories 1
debiancve 2
osv 2
seebug 5
prion 2
exploitpack 2
exploitdb 2
packetstorm 3
thn 2
threatpost 1
zdt 1
dsquare 1
openvas 10
securityvulns 3
nessus 5
freebsd 1
debian 1
gentoo 1
phpmyadmin
phpmyadmin
Possible session manipulation in Swekey authentication.
2011-07-02 00:00:00
ubuntucve
ubuntucve
CVE-2011-2505
2011-07-14 00:00:00
CVE-2011-2719
2011-08-01 00:00:00
nvd
nvd
CVE-2011-2505
2011-07-14 23:55:04
CVE-2011-2719
2011-08-01 19:55:01
cve
cve
CVE-2011-2505
2011-07-14 23:55:04
CVE-2011-2719
2011-08-01 19:55:01
cvelist
cvelist
CVE-2011-2505
2011-07-14 23:00:00
CVE-2011-2719
2011-08-01 19:00:00
checkpoint_advisories
checkpoint_advisories
PhpMyAdmin Remote Variable Manipulation (CVE-2011-2505)
2013-10-20 00:00:00
debiancve
debiancve
CVE-2011-2505
2011-07-14 23:55:04
CVE-2011-2719
2011-08-01 19:55:01
osv
osv
phpMyAdmin remote variable manipulation
2022-05-14 02:55:16
phpymadmin - several
2011-07-26 00:00:00
seebug
seebug
phpMyAdmin3 remote code execute exploit [Not jilei(chicken\'s ribs)]
2011-12-26 00:00:00
phpMyAdmin3 (pma3) Remote Code Execution Exploit
2011-07-10 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection Exploit
2011-07-09 00:00:00
prion
prion
Authentication flaw
2011-07-14 23:55:00
Sql injection
2011-08-01 19:55:00
exploitpack
exploitpack
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
exploitdb
exploitdb
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
packetstorm
packetstorm
phpMyAdmin3 Remote Code Execution
2011-07-09 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin 3.x Remote Code Execution
2011-07-08 00:00:00
thn
thn
Web Application Security : PHP SuperGlobal Variables are vulnerable to Hackers
2013-09-09 17:45:00
Web Application Security : PHP SuperGlobal Variables are vulnerable to Hackers
2013-09-09 06:45:00
threatpost
threatpost
Call for Ban on Vulnerable PHP SuperGlobal Variables
2013-09-09 14:54:04
zdt
zdt
phpMyAdmin 3.x Swekey Remote Code Injection Exploit
2011-07-09 00:00:00
dsquare
dsquare
Phpmyadmin 3.x RCE
2012-01-26 00:00:00
openvas
openvas
FreeBSD Ports: phpmyadmin
2011-08-03 00:00:00
Fedora Update for phpMyAdmin FEDORA-2011-9144
2011-07-18 00:00:00
Fedora Update for phpMyAdmin FEDORA-2011-9144
2011-07-18 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2011-07-13 00:00:00
phpMyAdmin 3.x Multiple Remote Code Executions
2011-07-13 00:00:00
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-08-01 00:00:00
nessus
nessus
Fedora 14 : phpMyAdmin-3.4.3.1-1.fc14 (2011-9144)
2011-07-18 00:00:00
phpMyAdmin 3.3.x / 3.4.x < 3.3.10.2 / 3.4.3.1 Multiple Vulnerabilities (PMASA-2011-5 - PMASA-2011-8)
2011-12-20 00:00:00
FreeBSD : phpmyadmin -- multiple vulnerabilities (7e4e5c53-a56c-11e0-b180-00216aa06fc2)
2011-07-05 00:00:00
freebsd
freebsd
phpmyadmin -- multiple vulnerabilities
2011-07-02 00:00:00
debian
debian
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-07-26 19:11:55
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2012-01-04 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.14

Percentile

95.7%

JSON
Related for GHSA-VQCM-R62W-W437
phpmyadmin1ubuntucve2nvd2cve2cvelist2checkpoint_advisories1debiancve2osv2seebug5prion2exploitpack2exploitdb2packetstorm3thn2threatpost1zdt1dsquare1openvas10securityvulns3nessus5freebsd1debian1gentoo1