Entries Related to ‘phpmyadmin’

scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors….

CVE Identifier: CVE-2009-4605
Vulnerability Type(s):
Severity: Medium

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors….

CVE Identifier: CVE-2008-7251
Vulnerability Type(s):
Severity: High

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors….

CVE Identifier: CVE-2008-7252
Vulnerability Type(s):
Severity: High

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors….

CVE Identifier: CVE-2008-7251
Vulnerability Type(s):
Severity: High

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors….

CVE Identifier: CVE-2008-7252
Vulnerability Type(s):
Severity: High

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table….

CVE Identifier: CVE-2009-3696
Vulnerability Type(s):
Severity: Medium

SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters….

CVE Identifier: CVE-2009-3697
Vulnerability Type(s):
Severity: High

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table….

CVE Identifier: CVE-2009-3696
Vulnerability Type(s):
Severity: Medium

SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters….

CVE Identifier: CVE-2009-3697
Vulnerability Type(s):
Severity: High

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table….

CVE Identifier: CVE-2009-3696
Vulnerability Type(s):
Severity: Medium