Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-2719
HistoryAug 01, 2011 - 7:55 p.m.

CVE-2011-2719

2011-08-0119:55:01
CWE-20
[email protected]
web.nvd.nist.gov
37
cve-2011-2719
phpmyadmin
swekey
authentication
session management
remote code execution
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

High

EPSS

0.14

Percentile

95.7%

JSON

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.

Affected configurations

NVD
Node
phpmyadminphpmyadminMatch3.0.0
OR
phpmyadminphpmyadminMatch3.0.0alpha
OR
phpmyadminphpmyadminMatch3.0.0beta
OR
phpmyadminphpmyadminMatch3.0.0rc1
OR
phpmyadminphpmyadminMatch3.0.1
OR
phpmyadminphpmyadminMatch3.0.1rc1
OR
phpmyadminphpmyadminMatch3.0.1.1
OR
phpmyadminphpmyadminMatch3.1.0
OR
phpmyadminphpmyadminMatch3.1.0beta1
OR
phpmyadminphpmyadminMatch3.1.1
OR
phpmyadminphpmyadminMatch3.1.1rc1
OR
phpmyadminphpmyadminMatch3.1.2
OR
phpmyadminphpmyadminMatch3.1.2rc1
OR
phpmyadminphpmyadminMatch3.1.3
OR
phpmyadminphpmyadminMatch3.1.3rc1
OR
phpmyadminphpmyadminMatch3.1.3.1
OR
phpmyadminphpmyadminMatch3.1.3.2
OR
phpmyadminphpmyadminMatch3.1.4
OR
phpmyadminphpmyadminMatch3.1.4rc2
OR
phpmyadminphpmyadminMatch3.1.5
OR
phpmyadminphpmyadminMatch3.1.5rc1
OR
phpmyadminphpmyadminMatch3.2.0
OR
phpmyadminphpmyadminMatch3.2.0beta1
OR
phpmyadminphpmyadminMatch3.2.0rc1
OR
phpmyadminphpmyadminMatch3.2.1
OR
phpmyadminphpmyadminMatch3.2.1rc1
OR
phpmyadminphpmyadminMatch3.2.2
OR
phpmyadminphpmyadminMatch3.2.2rc1
OR
phpmyadminphpmyadminMatch3.3.0.0
OR
phpmyadminphpmyadminMatch3.3.1.0
OR
phpmyadminphpmyadminMatch3.3.2.0
OR
phpmyadminphpmyadminMatch3.3.3.0
OR
phpmyadminphpmyadminMatch3.3.4.0
OR
phpmyadminphpmyadminMatch3.3.5.0
OR
phpmyadminphpmyadminMatch3.3.5.1
OR
phpmyadminphpmyadminMatch3.3.6
OR
phpmyadminphpmyadminMatch3.3.7
OR
phpmyadminphpmyadminMatch3.3.8
OR
phpmyadminphpmyadminMatch3.3.8.1
OR
phpmyadminphpmyadminMatch3.3.9.0
OR
phpmyadminphpmyadminMatch3.3.9.1
OR
phpmyadminphpmyadminMatch3.3.9.2
OR
phpmyadminphpmyadminMatch3.3.10.0
OR
phpmyadminphpmyadminMatch3.3.10.1
OR
phpmyadminphpmyadminMatch3.3.10.2
Node
phpmyadminphpmyadminMatch3.4.0.0
OR
phpmyadminphpmyadminMatch3.4.1.0
OR
phpmyadminphpmyadminMatch3.4.2.0
OR
phpmyadminphpmyadminMatch3.4.3.0
OR
phpmyadminphpmyadminMatch3.4.3.1
VendorProductVersionCPE
phpmyadminphpmyadmin3.3.7cpe:/a:phpmyadmin:phpmyadmin:3.3.7:::
phpmyadminphpmyadmin3.3.9.1cpe:/a:phpmyadmin:phpmyadmin:3.3.9.1:::
phpmyadminphpmyadmin3.0.0cpe:/a:phpmyadmin:phpmyadmin:3.0.0:beta::
phpmyadminphpmyadmin3.0.0cpe:/a:phpmyadmin:phpmyadmin:3.0.0:rc1::
phpmyadminphpmyadmin3.1.4cpe:/a:phpmyadmin:phpmyadmin:3.1.4:::
phpmyadminphpmyadmin3.2.1cpe:/a:phpmyadmin:phpmyadmin:3.2.1:rc1::
phpmyadminphpmyadmin3.1.4cpe:/a:phpmyadmin:phpmyadmin:3.1.4:rc2::
phpmyadminphpmyadmin3.2.0cpe:/a:phpmyadmin:phpmyadmin:3.2.0:::
phpmyadminphpmyadmin3.3.9.0cpe:/a:phpmyadmin:phpmyadmin:3.3.9.0:::
phpmyadminphpmyadmin3.3.8.1cpe:/a:phpmyadmin:phpmyadmin:3.3.8.1:::
Rows per page:
1-10 of 451

References

Related

cvelist 2
nvd 2
prion 2
debiancve 2
ubuntucve 2
phpmyadmin 2
openvas 16
fedora 2
nessus 7
cve 1
github 1
checkpoint_advisories 1
osv 2
seebug 5
packetstorm 3
exploitpack 2
thn 2
threatpost 1
dsquare 1
exploitdb 2
securityvulns 3
freebsd 1
debian 1
gentoo 1
cvelist
cvelist
CVE-2011-2719
2011-08-01 19:00:00
CVE-2011-2505
2011-07-14 23:00:00
nvd
nvd
CVE-2011-2719
2011-08-01 19:55:01
CVE-2011-2505
2011-07-14 23:55:04
prion
prion
Sql injection
2011-08-01 19:55:00
Authentication flaw
2011-07-14 23:55:00
debiancve
debiancve
CVE-2011-2719
2011-08-01 19:55:01
CVE-2011-2505
2011-07-14 23:55:04
ubuntucve
ubuntucve
CVE-2011-2719
2011-08-01 00:00:00
CVE-2011-2505
2011-07-14 00:00:00
phpmyadmin
phpmyadmin
Possible superglobal and local variables manipulation in swekey authentication.
2011-07-23 00:00:00
Possible session manipulation in Swekey authentication.
2011-07-02 00:00:00
openvas
openvas
phpMyAdmin 3.x < 3.3.10.3, 3.4.x < 3.4.3.2 Multiple Vulnerabilities (PMASA-2011-9, PMASA-2011-12) - Windows
2017-09-11 00:00:00
phpMyAdmin 3.x < 3.3.10.3, 3.4.x < 3.4.3.2 Multiple Vulnerabilities (PMASA-2011-9, PMASA-2011-12) - Linux
2017-09-11 00:00:00
Debian: Security Advisory (DSA-2286-1)
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.3.2-1.fc14
2011-08-05 03:49:58
[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.3.2-1.fc15
2011-08-05 03:52:20
nessus
nessus
Fedora 14 : phpMyAdmin-3.4.3.2-1.fc14 (2011-9725)
2011-08-05 00:00:00
Fedora 15 : phpMyAdmin-3.4.3.2-1.fc15 (2011-9734)
2011-08-05 00:00:00
Fedora 14 : phpMyAdmin-3.4.3.1-1.fc14 (2011-9144)
2011-07-18 00:00:00
cve
cve
CVE-2011-2505
2011-07-14 23:55:04
github
github
phpMyAdmin remote variable manipulation
2022-05-14 02:55:16
checkpoint_advisories
checkpoint_advisories
PhpMyAdmin Remote Variable Manipulation (CVE-2011-2505)
2013-10-20 00:00:00
osv
osv
phpMyAdmin remote variable manipulation
2022-05-14 02:55:16
phpymadmin - several
2011-07-26 00:00:00
seebug
seebug
phpMyAdmin3 remote code execute exploit [Not jilei(chicken\'s ribs)]
2011-12-26 00:00:00
phpMyAdmin3 (pma3) Remote Code Execution Exploit
2011-07-10 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection Exploit
2011-07-09 00:00:00
packetstorm
packetstorm
phpMyAdmin3 Remote Code Execution
2011-07-09 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin 3.x Remote Code Execution
2011-07-08 00:00:00
exploitpack
exploitpack
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
thn
thn
Web Application Security : PHP SuperGlobal Variables are vulnerable to Hackers
2013-09-09 06:45:00
Web Application Security : PHP SuperGlobal Variables are vulnerable to Hackers
2013-09-09 17:45:00
threatpost
threatpost
Call for Ban on Vulnerable PHP SuperGlobal Variables
2013-09-09 14:54:04
dsquare
dsquare
Phpmyadmin 3.x RCE
2012-01-26 00:00:00
exploitdb
exploitdb
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
2011-07-13 00:00:00
phpMyAdmin 3.x Multiple Remote Code Executions
2011-07-13 00:00:00
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-08-01 00:00:00
freebsd
freebsd
phpmyadmin -- multiple vulnerabilities
2011-07-02 00:00:00
debian
debian
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-07-26 19:11:55
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2012-01-04 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

High

EPSS

0.14

Percentile

95.7%

JSON
Related for CVE-2011-2719
cvelist2nvd2prion2debiancve2ubuntucve2phpmyadmin2openvas16fedora2nessus7cve1github1checkpoint_advisories1osv2seebug5packetstorm3exploitpack2thn2threatpost1dsquare1exploitdb2securityvulns3freebsd1debian1gentoo1