Lucene search

[email protected]NVD:CVE-2011-0987

HistoryFeb 14, 2011 - 10:00 p.m.

CVE-2011-0987

2011-02-1422:00:06

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.043

Percentile

92.4%

JSON

The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user’s execution of a SQL query by creating a bookmark.

Affected configurations

Nvd

Node

phpmyadminphpmyadminMatch2.11.0

phpmyadminphpmyadminMatch2.11.1.0

phpmyadminphpmyadminMatch2.11.1.1

phpmyadminphpmyadminMatch2.11.1.2

phpmyadminphpmyadminMatch2.11.2.0

phpmyadminphpmyadminMatch2.11.2.1

phpmyadminphpmyadminMatch2.11.2.2

phpmyadminphpmyadminMatch2.11.3.0

phpmyadminphpmyadminMatch2.11.4.0

phpmyadminphpmyadminMatch2.11.5.0

phpmyadminphpmyadminMatch2.11.5.1

phpmyadminphpmyadminMatch2.11.5.2

phpmyadminphpmyadminMatch2.11.6.0

phpmyadminphpmyadminMatch2.11.7.0

phpmyadminphpmyadminMatch2.11.7.1

phpmyadminphpmyadminMatch2.11.8.0

phpmyadminphpmyadminMatch2.11.9.0

phpmyadminphpmyadminMatch2.11.9.1

phpmyadminphpmyadminMatch2.11.9.2

phpmyadminphpmyadminMatch2.11.9.3

phpmyadminphpmyadminMatch2.11.9.4

phpmyadminphpmyadminMatch2.11.9.5

phpmyadminphpmyadminMatch2.11.9.6

phpmyadminphpmyadminMatch2.11.10.0

phpmyadminphpmyadminMatch2.11.10.1

phpmyadminphpmyadminMatch2.11.11

phpmyadminphpmyadminMatch2.11.11.1

phpmyadminphpmyadminMatch2.11.11.2

phpmyadminphpmyadminMatch3.0.0

phpmyadminphpmyadminMatch3.0.0alpha

phpmyadminphpmyadminMatch3.0.0beta

phpmyadminphpmyadminMatch3.0.0rc1

phpmyadminphpmyadminMatch3.0.1

phpmyadminphpmyadminMatch3.0.1rc1

phpmyadminphpmyadminMatch3.0.1.1

phpmyadminphpmyadminMatch3.1.0

phpmyadminphpmyadminMatch3.1.0beta1

phpmyadminphpmyadminMatch3.1.1

phpmyadminphpmyadminMatch3.1.1rc1

phpmyadminphpmyadminMatch3.1.2

phpmyadminphpmyadminMatch3.1.2rc1

phpmyadminphpmyadminMatch3.1.3

phpmyadminphpmyadminMatch3.1.3rc1

phpmyadminphpmyadminMatch3.1.3.1

phpmyadminphpmyadminMatch3.1.3.2

phpmyadminphpmyadminMatch3.1.4

phpmyadminphpmyadminMatch3.1.4rc2

phpmyadminphpmyadminMatch3.1.5

phpmyadminphpmyadminMatch3.1.5rc1

phpmyadminphpmyadminMatch3.2.0

phpmyadminphpmyadminMatch3.2.0beta1

phpmyadminphpmyadminMatch3.2.0rc1

phpmyadminphpmyadminMatch3.2.1

phpmyadminphpmyadminMatch3.2.1rc1

phpmyadminphpmyadminMatch3.2.2

phpmyadminphpmyadminMatch3.2.2rc1

phpmyadminphpmyadminMatch3.3.0.0

phpmyadminphpmyadminMatch3.3.1.0

phpmyadminphpmyadminMatch3.3.2.0

phpmyadminphpmyadminMatch3.3.3.0

phpmyadminphpmyadminMatch3.3.4.0

phpmyadminphpmyadminMatch3.3.5.0

phpmyadminphpmyadminMatch3.3.5.1

phpmyadminphpmyadminMatch3.3.6

phpmyadminphpmyadminMatch3.3.7

phpmyadminphpmyadminMatch3.3.8

phpmyadminphpmyadminMatch3.3.8.1

phpmyadminphpmyadminMatch3.3.9.0

phpmyadminphpmyadminMatch3.3.9.1

VendorProductVersionCPE
phpmyadminphpmyadmin2.11.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.1.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.1.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.1.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.2.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.2.1cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.2.2cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.3.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.4.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:*:*:*:*:*:*:*
phpmyadminphpmyadmin2.11.5.0cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyadmin	phpmyadmin	2.11.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:::::::*
phpmyadmin	phpmyadmin	2.11.1.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:::::::*
phpmyadmin	phpmyadmin	2.11.1.1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:::::::*
phpmyadmin	phpmyadmin	2.11.1.2	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:::::::*
phpmyadmin	phpmyadmin	2.11.2.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:::::::*
phpmyadmin	phpmyadmin	2.11.2.1	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:::::::*
phpmyadmin	phpmyadmin	2.11.2.2	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:::::::*
phpmyadmin	phpmyadmin	2.11.3.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:::::::*
phpmyadmin	phpmyadmin	2.11.4.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4.0:::::::*
phpmyadmin	phpmyadmin	2.11.5.0	cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.0:::::::*