Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
dsquareDsquare SecurityE-36
HistoryApr 13, 2012 - 12:00 a.m.

Phpmyadmin File Upload

2012-04-1300:00:00
Dsquare Security
84

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.793 High

EPSS

Percentile

98.0%

JSON

Phpmyadmin config file code injection (setup.php)

Vulnerability Type: Remote Command Execution

For the exploit source code contact DSquare Security sales team.

Related

canvas 1
nessus 6
hackerone 1
checkpoint_advisories 1
prion 1
openvas 19
packetstorm 2
symantec 1
seebug 3
redhatcve 1
attackerkb 1
metasploit 1
phpmyadmin 1
cve 1
cisa_kev 1
d2 1
exploitpack 1
myhack58 1
ubuntucve 1
freebsd 1
nuclei 1
debiancve 1
exploitdb 2
osv 1
securityvulns 2
debian 1
gentoo 1
threatpost 1
talosblog 1
canvas
canvas
Immunity Canvas: PHPMYADMIN_INJECTION
2009-03-26 14:30:00
nessus
nessus
phpMyAdmin setup.php save Action Arbitrary PHP Code Injection (PMASA-2009-3)
2009-04-16 00:00:00
FreeBSD : phpmyadmin -- insufficient output sanitizing when generating configuration file (06f9174f-190f-11de-b2f0-001c2514716c)
2009-03-25 00:00:00
GLSA-200906-03 : phpMyAdmin: Multiple vulnerabilities
2009-06-30 00:00:00
hackerone
hackerone
Mail.ru: PHP code injection at tz.mail.ru
2020-02-17 16:32:55
checkpoint_advisories
checkpoint_advisories
PHPMyAdmin Misconfiguration Remote Code Injection (CVE-2009-1151)
2014-02-23 00:00:00
prion
prion
Code injection
2009-03-26 14:30:00
openvas
openvas
FreeBSD Ports: phpMyAdmin211
2009-03-31 00:00:00
FreeBSD Ports: phpMyAdmin211
2009-03-31 00:00:00
phpMyAdmin Code Injection and XSS Vulnerability
2009-03-26 00:00:00
packetstorm
packetstorm
phpMyAdmin /scripts/setup.php Code Injection
2009-06-10 00:00:00
PhpMyAdmin Config File Code Injection
2009-12-31 00:00:00
symantec
symantec
phpMyAdmin 'setup.php' PHP Code Injection Vulnerability
2009-03-25 00:00:00
seebug
seebug
phpMyAdmin (/scripts/setup.php) PHP Code Injection Exploit
2009-06-11 00:00:00
PhpMyAdmin Config File Code Injection
2014-07-01 00:00:00
phpMyAdmin setup.php่„šๆœฌPHPไปฃ็ ๆณจๅ…ฅๆผๆดž
2009-06-19 00:00:00
redhatcve
redhatcve
CVE-2009-1151
2019-10-04 21:32:59
attackerkb
attackerkb
CVE-2009-1151
2009-03-26 00:00:00
metasploit
metasploit
PhpMyAdmin Config File Code Injection
2009-11-16 08:42:32
phpmyadmin
phpmyadmin
Insufficient output sanitizing when generating configuration file.
2009-03-24 00:00:00
cve
cve
CVE-2009-1151
2009-03-26 14:30:00
cisa_kev
cisa_kev
phpMyAdmin Remote Code Execution Vulnerability
2022-03-25 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_PHPMYADMIN_RCE
2009-03-26 14:30:00
exploitpack
exploitpack
phpMyAdmin - scriptssetup.php PHP Code Injection
2009-06-09 00:00:00
myhack58
myhack58
CVE-2 0 0 9-1 1 5 1 phpMyadmin Remote Code Injection && Execution-vulnerability warning-the black bar safety net
2014-10-23 00:00:00
ubuntucve
ubuntucve
CVE-2009-1151
2009-03-26 00:00:00
freebsd
freebsd
phpmyadmin -- insufficient output sanitizing when generating configuration file
2009-03-24 00:00:00
nuclei
nuclei
PhpMyAdmin Scripts - Remote Code Execution
2021-04-14 12:04:59
debiancve
debiancve
CVE-2009-1151
2009-03-26 14:30:00
exploitdb
exploitdb
phpMyAdmin - Config File Code Injection (Metasploit)
2010-07-03 00:00:00
phpMyAdmin - '/scripts/setup.php' PHP Code Injection
2009-06-09 00:00:00
osv
osv
phpmyadmin - several vulnerabilities
2009-06-25 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities
2009-06-26 00:00:00
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2009-06-26 00:00:00
debian
debian
[SECURITY] [DSA 1824-1] New phpmyadmin packages fix several vulnerabilities
2009-06-25 20:55:52
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2009-06-29 00:00:00
threatpost
threatpost
State-Sponsored DNS Hijacking Infiltrates 40 Firms Globally
2019-04-17 17:32:06
talosblog
talosblog
DNS Hijacking Abuses Trust In Core Internet Service
2019-04-18 16:08:25

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.793 High

EPSS

Percentile

98.0%

JSON
Related for E-36
canvas1nessus6hackerone1checkpoint_advisories1prion1openvas19packetstorm2symantec1seebug3redhatcve1attackerkb1metasploit1phpmyadmin1cve1cisa_kev1d21exploitpack1myhack581ubuntucve1freebsd1nuclei1debiancve1exploitdb2osv1securityvulns2debian1gentoo1threatpost1talosblog1