VDB
CVE-2011-2719
CVE-2011-2719
PUBLISHED
CVSS 6.400000095367432 MEDIUM
libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.
EPSS 2.43% · 83.9th percentile
Risk Scores
CVSS 2.0
6.400000095367432
EPSS Score
2.43%
83.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| phpmyadmin | phpmyadmin | 3.0.0, 3.0.0, 3.0.0 |
Timeline
- Aug 1, 2011 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
References
- 20110804 Re: [Full-disclosure] phpMyAdmin 3.x Conditional Session Manipulation mailing-list
- DSA-2286 vendor-advisory
- http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt url
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7 url
- 20110724 phpMyAdmin 3.x Conditional Session Manipulation mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=725384 url
- 45365 third-party-advisory
- 74112 vdb
- FEDORA-2011-9725 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2011-2719 advisory
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=571cdc6ff4bf375871b594f4e06f8ad3159d1754 url
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7 url
- http://secunia.com/advisories/45315 url
- http://securityreason.com/securityalert/8322 url
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php url
- http://www.securityfocus.com/archive/1/518967/100/0/threaded url
- http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html technical
- http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=571cdc6ff4bf375871b594f4e06f8ad3159d1754 technical
- http://secunia.com/advisories/45515 technical
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 technical
…and 4 more