Back to search
CVE-2011-2506
Published: Jul 14, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[oss-security] 20110628 CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/
x_refsource_CONFIRM
http://www.phpmyadmin.net/home_page/security/PMASA-2011-6.php
x_refsource_CONFIRM
45292
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20110628 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
[oss-security] 20110628 Re: [Phpmyadmin-security] CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
MDVSA-2011:124
vendor-advisory
x_refsource_MANDRIVA
8306
third-party-advisory
x_refsource_SREASON
45139
third-party-advisory
x_refsource_SECUNIA
17514
exploit
x_refsource_EXPLOIT-DB
DSA-2286
vendor-advisory
x_refsource_DEBIAN
20110707 phpMyAdmin 3.x Multiple Remote Code Executions
mailing-list
x_refsource_BUGTRAQ
73612
vdb-entry
x_refsource_OSVDB
[oss-security] 20110629 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities
mailing-list
x_refsource_MLIST
45315
third-party-advisory
x_refsource_SECUNIA
FEDORA-2011-9144
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now