Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4729
HistoryJul 04, 2013 - 12:00 a.m.

CVE-2013-4729

2013-07-0400:00:00
ubuntu.com
ubuntu.com
10

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.001

Percentile

50.9%

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the
ability of input data to specify a file format, which allows remote
authenticated users to modify the GLOBALS superglobal array, and
consequently change the configuration, via a crafted request.

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.001

Percentile

50.9%