Lucene search

K
cve[email protected]CVE-2013-3241
HistoryApr 26, 2013 - 3:34 a.m.

CVE-2013-3241

2013-04-2603:34:00
NVD-CWE-noinfo
web.nvd.nist.gov
33
cve-2013-3241
phpmyadmin
export.php
security vulnerability
nvd

5.8 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

35.0%

export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users to inject values via a crafted request.

CPENameOperatorVersion
phpmyadmin:phpmyadminphpmyadmineq4.0.0

5.8 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

35.0%