phpymadmin - several

Fixed packages 2

Vulnerabilities 6

• Medium —
  CVE-2011-2505 Public exploit EPSS 13%

  phpMyAdmin remote variable manipulation

  libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSIO…

  phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  Jul 14, 2011
• High —
  CVE-2011-2506 Public exploit

  phpMyAdmin vulnerable to static code injection

  setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the abil…

  phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  Jul 14, 2011
• Unscored —
  CVE-2011-2507

  libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x befo…

  phpmyadmin Debian
  Jul 14, 2011
• High —
  CVE-2011-2508

  phpMyAdmin Directory Traversal vulnerability

  Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local file…

  phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  Jul 14, 2011
• Unscored —
  CVE-2011-2642

  Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpM…

  phpmyadmin Debian
  Aug 1, 2011
• Unscored —
  CVE-2011-2719

  libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly …

  phpmyadmin Debian
  Aug 1, 2011