Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action.

References

bugzilla.redhat.com/show_bug.cgi?id=492066

nvd.nist.gov/vuln/detail/CVE-2009-1151

www.cve.org/CVERecord?id=CVE-2009-1151

canvas 1

hackerone 1

nessus 6

seebug 3

cisa_kev 1

cvelist 1

cve 1

openvas 19

attackerkb 1

metasploit 1

nvd 1

phpmyadmin 1

freebsd 1

d2 1

debiancve 1

exploitpack 1

ubuntucve 1

myhack58 1

nuclei 1

dsquare 1

packetstorm 2

checkpoint_advisories 1

prion 1

symantec 1

exploitdb 2

osv 1

debian 1

securityvulns 2

gentoo 1

threatpost 1

talosblog 1

canvas

Immunity Canvas: PHPMYADMIN_INJECTION

2009-03-26 14:30:00

hackerone

Mail.ru: PHP code injection at tz.mail.ru

2020-02-17 16:32:55

nessus

phpMyAdmin setup.php save Action Arbitrary PHP Code Injection (PMASA-2009-3)

2009-04-16 00:00:00

FreeBSD : phpmyadmin -- insufficient output sanitizing when generating configuration file (06f9174f-190f-11de-b2f0-001c2514716c)

2009-03-25 00:00:00

GLSA-200906-03 : phpMyAdmin: Multiple vulnerabilities

2009-06-30 00:00:00

seebug

PhpMyAdmin Config File Code Injection

2014-07-01 00:00:00

phpMyAdmin setup.php脚本PHP代码注入漏洞

2009-06-19 00:00:00

phpMyAdmin (/scripts/setup.php) PHP Code Injection Exploit

2009-06-11 00:00:00

cisa_kev

phpMyAdmin Remote Code Execution Vulnerability

2022-03-25 00:00:00

cvelist

CVE-2009-1151

2009-03-26 14:00:00

cve

CVE-2009-1151

2009-03-26 14:30:00

openvas

phpMyAdmin Code Injection and XSS Vulnerability

2009-03-26 00:00:00

FreeBSD Ports: phpMyAdmin211

2009-03-31 00:00:00

FreeBSD Ports: phpMyAdmin211

2009-03-31 00:00:00

attackerkb

CVE-2009-1151

2009-03-26 00:00:00

metasploit

PhpMyAdmin Config File Code Injection

2009-11-16 08:42:32

nvd

CVE-2009-1151

2009-03-26 14:30:00

phpmyadmin

Insufficient output sanitizing when generating configuration file.

2009-03-24 00:00:00

freebsd

phpmyadmin -- insufficient output sanitizing when generating configuration file

2009-03-24 00:00:00

DSquare Exploit Pack: D2SEC_PHPMYADMIN_RCE

2009-03-26 14:30:00

debiancve

CVE-2009-1151

2009-03-26 14:30:00

exploitpack

phpMyAdmin - scriptssetup.php PHP Code Injection

2009-06-09 00:00:00

ubuntucve

CVE-2009-1151

2009-03-26 00:00:00

myhack58

CVE-2 0 0 9-1 1 5 1 phpMyadmin Remote Code Injection && Execution-vulnerability warning-the black bar safety net

2014-10-23 00:00:00

nuclei

PhpMyAdmin Scripts - Remote Code Execution

2021-04-14 12:04:59

dsquare

Phpmyadmin File Upload

2012-04-13 00:00:00

packetstorm

phpMyAdmin /scripts/setup.php Code Injection

2009-06-10 00:00:00

PhpMyAdmin Config File Code Injection

2009-12-31 00:00:00

checkpoint_advisories

PHPMyAdmin Misconfiguration Remote Code Injection (CVE-2009-1151)

2014-02-23 00:00:00

prion

Code injection

2009-03-26 14:30:00

symantec

phpMyAdmin 'setup.php' PHP Code Injection Vulnerability

2009-03-25 00:00:00

exploitdb

phpMyAdmin - '/scripts/setup.php' PHP Code Injection

2009-06-09 00:00:00

phpMyAdmin - Config File Code Injection (Metasploit)

2010-07-03 00:00:00

osv

phpmyadmin - several vulnerabilities

2009-06-25 00:00:00

debian

[SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities

2009-06-25 20:55:52

securityvulns

[SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities

2009-06-26 00:00:00

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

2009-06-26 00:00:00

gentoo

phpMyAdmin: Multiple vulnerabilities

2009-06-29 00:00:00

threatpost

State-Sponsored DNS Hijacking Infiltrates 40 Firms Globally

2019-04-17 17:32:06

talosblog

DNS Hijacking Abuses Trust In Core Internet Service

2019-04-18 16:08:25

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.799 High

EPSS

Percentile

98.3%

JSON

Related for RH:CVE-2009-1151