Lucene search
Ubuntu.comUB:CVE-2011-2505HistoryJul 14, 2011 - 12:00 a.m.
CVE-2011-2505
2011-07-1400:00:00
ubuntu.com
ubuntu.com
11
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
EPSS
0.14
Percentile
95.7%
libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication
feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns
values to arbitrary parameters referenced in the query string, which allows
remote attackers to modify the SESSION superglobal array via a crafted
request, related to a “remote variable manipulation vulnerability.”
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 11.10 | noarch | phpmyadmin | < 4:3.4.3.1-1 | UNKNOWN |
| ubuntu | 12.04 | noarch | phpmyadmin | < 4:3.4.3.1-1 | UNKNOWN |
| ubuntu | 12.10 | noarch | phpmyadmin | < 4:3.4.3.1-1 | UNKNOWN |
| ubuntu | 13.04 | noarch | phpmyadmin | < 4:3.4.3.1-1 | UNKNOWN |
| ubuntu | 13.10 | noarch | phpmyadmin | < 4:3.4.3.1-1 | UNKNOWN |
Related
cvelist
cvelist
CVE-2011-2505
2011-07-14 23:00:00
CVE-2011-2719
2011-08-01 19:00:00
phpmyadmin
phpmyadmin
Possible session manipulation in Swekey authentication.
2011-07-02 00:00:00
github
github
phpMyAdmin remote variable manipulation
2022-05-14 02:55:16
nvd
nvd
CVE-2011-2505
2011-07-14 23:55:04
CVE-2011-2719
2011-08-01 19:55:01
cve
cve
CVE-2011-2505
2011-07-14 23:55:04
CVE-2011-2719
2011-08-01 19:55:01
checkpoint_advisories
checkpoint_advisories
PhpMyAdmin Remote Variable Manipulation (CVE-2011-2505)
2013-10-20 00:00:00
debiancve
debiancve
CVE-2011-2505
2011-07-14 23:55:04
CVE-2011-2719
2011-08-01 19:55:01
osv
osv
phpMyAdmin remote variable manipulation
2022-05-14 02:55:16
phpymadmin - several
2011-07-26 00:00:00
seebug
seebug
phpMyAdmin3 remote code execute exploit [Not jilei(chicken\'s ribs)]
2011-12-26 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection Exploit
2011-07-09 00:00:00
phpMyAdmin3 (pma3) Remote Code Execution Exploit
2011-07-10 00:00:00
prion
prion
Authentication flaw
2011-07-14 23:55:00
Sql injection
2011-08-01 19:55:00
exploitpack
exploitpack
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
packetstorm
packetstorm
phpMyAdmin3 Remote Code Execution
2011-07-09 00:00:00
phpMyAdmin 3.x Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin 3.x Remote Code Execution
2011-07-08 00:00:00
thn
thn
threatpost
threatpost
Call for Ban on Vulnerable PHP SuperGlobal Variables
2013-09-09 14:54:04
ubuntucve
ubuntucve
CVE-2011-2719
2011-08-01 00:00:00
dsquare
dsquare
Phpmyadmin 3.x RCE
2012-01-26 00:00:00
exploitdb
exploitdb
phpMyAdmin 3.x - Swekey Remote Code Injection
2011-07-09 00:00:00
phpMyAdmin3 (pma3) - Remote Code Execution
2011-07-08 00:00:00
openvas
openvas
Fedora Update for phpMyAdmin FEDORA-2011-9144
2011-07-18 00:00:00
Fedora Update for phpMyAdmin FEDORA-2011-9144
2011-07-18 00:00:00
phpMyAdmin < 3.3.10.2, 3.4.x < 3.4.3.1 Multiple Remote Vulnerabilities
2011-07-11 00:00:00
nessus
nessus
freebsd
freebsd
phpmyadmin -- multiple vulnerabilities
2011-07-02 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-07-13 00:00:00
phpMyAdmin 3.x Multiple Remote Code Executions
2011-07-13 00:00:00
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-08-01 00:00:00
debian
debian
[SECURITY] [DSA 2286-1] phpmyadmin security update
2011-07-26 19:11:55
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2012-01-04 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
EPSS
0.14
Percentile
95.7%
Related for UB:CVE-2011-2505