Back to search
CVE-2011-2505
Published: Jul 14, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a "remote variable manipulation vulnerability."
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[oss-security] 20110628 CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/
x_refsource_CONFIRM
45292
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20110628 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
[oss-security] 20110628 Re: [Phpmyadmin-security] CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
MDVSA-2011:124
vendor-advisory
x_refsource_MANDRIVA
8306
third-party-advisory
x_refsource_SREASON
http://www.phpmyadmin.net/home_page/security/PMASA-2011-5.php
x_refsource_CONFIRM
45139
third-party-advisory
x_refsource_SECUNIA
73611
vdb-entry
x_refsource_OSVDB
17514
exploit
x_refsource_EXPLOIT-DB
DSA-2286
vendor-advisory
x_refsource_DEBIAN
20110707 phpMyAdmin 3.x Multiple Remote Code Executions
mailing-list
x_refsource_BUGTRAQ
[oss-security] 20110629 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
45315
third-party-advisory
x_refsource_SECUNIA
FEDORA-2011-9144
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now