Lucene search

K
nvd[email protected]NVD:CVE-2013-3241
HistoryApr 26, 2013 - 3:34 a.m.

CVE-2013-3241

2013-04-2603:34:23
web.nvd.nist.gov
5

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

35.6%

export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users to inject values via a crafted request.

Affected configurations

Nvd
Node
phpmyadminphpmyadminMatch4.0.0rc2

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

35.6%