Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-GG36-9346-9QX9
HistoryMay 17, 2022 - 4:58 a.m.

phpMyAdmin Remote Code Execution

2022-05-1704:58:08
CWE-94
GitHub Advisory Database
github.com
11

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.043 Low

EPSS

Percentile

92.3%

JSON

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.

CPENameOperatorVersion
phpmyadmin/phpmyadminlt3.5.8.1

Related

cve 1
ubuntucve 1
osv 2
seebug 2
debiancve 1
prion 1
phpmyadmin 1
securityvulns 3
openvas 8
nessus 9
freebsd 1
fedora 3
packetstorm 1
debian 2
exploitpack 1
zdt 1
exploitdb 1
gentoo 1
cve
cve
CVE-2013-3239
2013-04-26 03:34:00
ubuntucve
ubuntucve
CVE-2013-3239
2013-04-26 00:00:00
osv
osv
phpMyAdmin Remote Code Execution
2022-05-17 04:58:08
phpmyadmin - security update
2014-07-09 00:00:00
seebug
seebug
phpMyAdmin 'filename_template' θΏœη¨‹δ»£η ζ‰§θ‘Œ(CVE-2013-3239)
2013-04-28 00:00:00
phpMyAdmin 3.5.8 and 4.0.0-RC2 - Multiple Vulnerabilities
2014-07-01 00:00:00
debiancve
debiancve
CVE-2013-3239
2013-04-26 03:34:00
prion
prion
Design/Logic Flaw
2013-04-26 03:34:00
phpmyadmin
phpmyadmin
Locally Saved SQL Dump File Multiple File Extension Remote Code Execution.
2013-04-24 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:160 ] phpmyadmin
2013-05-06 00:00:00
[waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin
2013-05-06 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-05-06 00:00:00
openvas
openvas
Fedora Update for phpMyAdmin FEDORA-2013-6977
2013-05-13 00:00:00
phpMyAdmin Multiple Security Vulnerabilities (Apr 2013) - Windows
2017-08-16 00:00:00
Fedora Update for phpMyAdmin FEDORA-2013-7000
2013-05-13 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : phpmyadmin (MDVSA-2013:160)
2013-05-04 00:00:00
Fedora 18 : phpMyAdmin-3.5.8.1-1.fc18 (2013-6977)
2013-05-10 00:00:00
Fedora 17 : phpMyAdmin-3.5.8.1-1.fc17 (2013-7000)
2013-05-10 00:00:00
freebsd
freebsd
phpMyAdmin -- Multiple security vulnerabilities
2013-04-24 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: phpMyAdmin-3.5.8.1-1.fc18
2013-05-09 10:10:52
[SECURITY] Fedora 17 Update: phpMyAdmin-3.5.8.1-1.fc17
2013-05-09 09:58:00
[SECURITY] Fedora 19 Update: phpMyAdmin-3.5.8.1-1.fc19
2013-05-09 18:59:18
packetstorm
packetstorm
phpMyAdmin 3.5.8 / 4.0.0-RC2 Code Execution / LFI / Overwrite
2013-04-25 00:00:00
debian
debian
phpmyadmin security update
2014-07-09 19:24:32
phpmyadmin security update
2014-07-09 19:24:50
exploitpack
exploitpack
phpMyAdmin 3.5.84.0.0-RC2 - Multiple Vulnerabilities
2013-04-25 00:00:00
zdt
zdt
phpMyAdmin 3.5.8 and 4.0.0-RC2 - Multiple Vulnerabilities
2013-04-26 00:00:00
exploitdb
exploitdb
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
2013-04-25 00:00:00
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2013-11-04 00:00:00

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.043 Low

EPSS

Percentile

92.3%

JSON
Related for GHSA-GG36-9346-9QX9
cve1ubuntucve1osv2seebug2debiancve1prion1phpmyadmin1securityvulns3openvas8nessus9freebsd1fedora3packetstorm1debian2exploitpack1zdt1exploitdb1gentoo1