phpMyAdmin Remote Code Execution

🗓️ 17 May 2022 04:58:08Reported by GitHub Advisory DatabaseType

phpMyAdmin Remote Code Execution vulnerability in versions 3.5.x to 3.5.8 and 4.x to 4.0.0-rc3 allows remote authenticated users to execute arbitrary code through double extension filenames in export files, leading to Apache HTTP Server interpreting them as executable files

Reporter	Title	Published	Views	Family All 45
0day.today	phpMyAdmin 3.5.8 and 4.0.0-RC2 - Multiple Vulnerabilities	26 Apr 201300:00	–	zdt
Tenable Nessus	phpMyAdmin 3.5.x < 3.5.8.1 / 4.x < 4.0.0-rc3 Multiple Vulnerabilities	19 Jul 201300:00	–	nessus
Tenable Nessus	Fedora 19 : phpMyAdmin-3.5.8.1-1.fc19 (2013-6928)	10 May 201300:00	–	nessus
Tenable Nessus	Fedora 18 : phpMyAdmin-3.5.8.1-1.fc18 (2013-6977)	10 May 201300:00	–	nessus
Tenable Nessus	Fedora 17 : phpMyAdmin-3.5.8.1-1.fc17 (2013-7000)	10 May 201300:00	–	nessus
Tenable Nessus	FreeBSD : phpMyAdmin -- Multiple security vulnerabilities (8c8fa44d-ad15-11e2-8cea-6805ca0b3d42)	25 Apr 201300:00	–	nessus
Tenable Nessus	GLSA-201311-02 : phpMyAdmin: Multiple vulnerabilities	5 Nov 201300:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : phpmyadmin (MDVSA-2013:160)	4 May 201300:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-SU-2013:1065-1)	13 Jun 201400:00	–	nessus
Tenable Nessus	phpMyAdmin 3.5.x < 3.5.8.1 / 4.x < 4.0.0-rc3 Multiple Vulnerabilities (PMASA-2013-2 - PMASA-2013-5	2 May 201300:00	–	nessus

Vulners

Node

phpmyadmin phpmyadminRange3.5.0–3.5.8.1composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-3239
github	www.github.com/phpmyadmin/phpmyadmin/commit/1f6bc0b707002e26cab216b9e57b4d5de764de48
github	www.github.com/phpmyadmin/phpmyadmin/commit/d3fafdfba0807068196655e9b6d16c5d1d3ccf8a
lists	www.lists.fedoraproject.org/pipermail/package-announce/2013-May/104725.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2013-May/104770.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2013-May/104936.html
lists	www.lists.opensuse.org/opensuse-updates/2013-06/msg00181.html
phpmyadmin	www.phpmyadmin.net/home_page/security/PMASA-2013-3.php
github	www.github.com/advisories/GHSA-gg36-9346-9qx9

29 Aug 2023 18:15Current

7.6High risk

Vulners AI Score7.6

CVSS 24.6

EPSS0.12333

CWE-94