4 matches found
CVE-2013-3241
export.php aka the export script in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users to inject values via a crafted request...
CVE-2013-3241
CVE-2013-3241 refers to a vulnerability in phpMyAdmin 4.x prior to 4.0.0-rc3 where export.php overwrites global variables based on the POST contents, enabling remote authenticated users to inject values via crafted requests. This entry is corroborated by NVD, and related advisories describe multi...
CVE-2013-3241
creationtimestamp| type| source ---|---|--- 2013-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25003...
Global variables overwrite in "export.php".
PMASA-2013-5 Announcement-ID: PMASA-2013-5 Date: 2013-04-24 Summary Global variables overwrite in "export.php". Description The export script generates global variables from those present in the $$POST superglobal. This may lead to other exploits in the export script. Severity We consider this...