CVE-2008-4096

2008-09-1800:00:00

ubuntu.com

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.078 Low

EPSS

Percentile

94.2%

JSON

libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows
remote authenticated users to execute arbitrary code via a request to
server_databases.php with a sort_by parameter containing PHP sequences,
which are processed by create_function.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchphpmyadmin< 4:2.11.3-1ubuntu1.2UNKNOWN
ubuntu8.10noarchphpmyadmin< 4:2.11.8.1-1ubuntu0.1UNKNOWN