Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-3238
HistoryApr 26, 2013 - 12:00 a.m.

CVE-2013-3238

2013-04-2600:00:00
ubuntu.com
ubuntu.com
11

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.973 High

EPSS

Percentile

99.9%

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote
authenticated users to execute arbitrary code via a /e\x00 sequence, which
is not properly handled before making a preg_replace function call within
the β€œReplace table prefix” feature.

Notes

Author Note
jdstrand per Debian, PHP on Windows only

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

0.973 High

EPSS

Percentile

99.9%