Описание
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | not-affected | 4:3.1.2-1 |
| feisty | ignored | end of life, was needs-triage |
| gutsy | ignored | end of life, was needs-triage |
| hardy | released | 4:2.11.3-1ubuntu1.2 |
| intrepid | released | 4:2.11.8.1-1ubuntu0.1 |
| jaunty | not-affected | 4:3.1.2-1 |
| karmic | not-affected | 4:3.1.2-1 |
| upstream | released | 2.11.9.1 |
Показывать по
Ссылки на источники
EPSS
8.5 High
CVSS2
Связанные уязвимости
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 all ...
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
EPSS
8.5 High
CVSS2