Lucene search

K
canvasImmunity CanvasPHPMYADMIN_INJECTION
HistoryMar 26, 2009 - 2:30 p.m.

Immunity Canvas: PHPMYADMIN_INJECTION

2009-03-2614:30:00
Immunity Canvas
exploitlist.immunityinc.com
31

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.793 High

EPSS

Percentile

98.0%

Name phpmyadmin_injection
CVE CVE-2009-1151 Exploit Pack
VENDOR: http://www.phpmyadmin.net
Notes: This exploit requires that the "/config/ directory was not deleted after installation. Basic authorization may also be needed to reach the phpMyAdmin interface
Repeatability: Infinite
References: http://www.phpmyadmin.net/home_page/security/PMASA-2009-3.php
CVE URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1151
CVSS: 7.5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.793 High

EPSS

Percentile

98.0%