what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 6 of 6 RSS Feed

CVE-2011-2505

Status Candidate

Overview

libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a "remote variable manipulation vulnerability."

Related Files

Gentoo Linux Security Advisory 201201-01
Posted Jan 5, 2012
Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201201-1 - Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. Versions less than 3.4.9 are affected.

tags | advisory, arbitrary, php, vulnerability
systems | linux, gentoo
advisories | CVE-2008-7251, CVE-2008-7252, CVE-2010-2958, CVE-2010-3055, CVE-2010-3056, CVE-2010-3263, CVE-2011-0986, CVE-2011-0987, CVE-2011-2505, CVE-2011-2506, CVE-2011-2507, CVE-2011-2508, CVE-2011-2642, CVE-2011-2643, CVE-2011-2718, CVE-2011-2719, CVE-2011-3646, CVE-2011-4064, CVE-2011-4107, CVE-2011-4634, CVE-2011-4780, CVE-2011-4782
SHA-256 | a9a0414a3c076b4e97dee46444baeb67c679e1b447f44f4f421858257e7dff0c
Mandriva Linux Security Advisory 2011-124
Posted Aug 15, 2011
Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-124 - Multiple vulnerabilities has been discovered and corrected in phpmyadmin. These issues range from variable manipulation to directory traversal issues. The updated packages have been upgraded to the 3.4.3.2 version which is not vulnerable to these issues.

tags | advisory, vulnerability
systems | linux, mandriva
advisories | CVE-2011-2505, CVE-2011-2506, CVE-2011-2507, CVE-2011-2508, CVE-2011-2642, CVE-2011-2643, CVE-2011-2718, CVE-2011-2719
SHA-256 | c34dc808d329cdeb1edd45c47eb863930a74cc981676180759e415ad2fed3bbd
Debian Security Advisory 2286-1
Posted Jul 26, 2011
Authored by Debian | Site debian.org

Debian Linux Security Advisory 2286-1 - Several vulnerabilities were discovered in phpMyAdmin, a tool to administrate MySQL over the web.

tags | advisory, web, vulnerability
systems | linux, debian
advisories | CVE-2011-2505, CVE-2011-2506, CVE-2011-2507, CVE-2011-2508, CVE-2011-2642
SHA-256 | 5232eb39ec45ec2a9658885191e2c8d369d735ac029588b312fe47f2a4e013ed
phpMyAdmin3 Remote Code Execution
Posted Jul 9, 2011
Authored by wofeiwo

Remote code execution exploit for phpMyAdmin versions below 3.3.10.2 and 3.4.3.1.

tags | exploit, remote, code execution
advisories | CVE-2011-2505, CVE-2011-2506
SHA-256 | f5f22298bd549a0b165bd80aca48e7785c5491d504015ab5cf318f76a751fd27
phpMyAdmin 3.x Swekey Remote Code Injection
Posted Jul 9, 2011
Authored by Mango

phpMyAdmin Swekey remote code injection exploit that affects versions prior to 3.4.3.1 and versions prior to 3.3.10.2.

tags | exploit, remote
advisories | CVE-2011-2505, CVE-2011-2506
SHA-256 | ad7c03013a93cbfc3a71ddcf1e0e7a96dc3afaf12cd89e7617e169215191b09f
phpMyAdmin 3.x Remote Code Execution
Posted Jul 8, 2011
Authored by Mango

phpMyAdmin version 3.x suffers from multiple remote code execution vulnerabilities.

tags | exploit, remote, vulnerability, code execution
advisories | CVE-2011-2505, CVE-2011-2506, CVE-2011-2507, CVE-2011-2508
SHA-256 | 2c8f67b34ff9e950a203c8d95cb5db1edaf669e76877d659e135f52bfce8de93
Page 1 of 1
Back1Next

File Archive:

November 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    30 Files
  • 2
    Nov 2nd
    0 Files
  • 3
    Nov 3rd
    0 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    44 Files
  • 6
    Nov 6th
    18 Files
  • 7
    Nov 7th
    9 Files
  • 8
    Nov 8th
    8 Files
  • 9
    Nov 9th
    3 Files
  • 10
    Nov 10th
    0 Files
  • 11
    Nov 11th
    14 Files
  • 12
    Nov 12th
    20 Files
  • 13
    Nov 13th
    63 Files
  • 14
    Nov 14th
    18 Files
  • 15
    Nov 15th
    0 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close