CVE

Id
50419  
CVE No.
CVE-2011-2507  
Status
Candidate  
Description
libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly quote regular expressions, which allows remote authenticated users to inject a PCRE e (aka PREG_REPLACE_EVAL) modifier, and consequently execute arbitrary PHP code, by leveraging the ability to modify the SESSION superglobal array.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
545041 50419 CVE-2011-2507 BUGTRAQ:20110707 phpMyAdmin 3.x Multiple Remote Code Executions  View
545042 50419 CVE-2011-2507 URL:http://www.securityfocus.com/archive/1/archive/1/518804/100/0/threaded  View
545043 50419 CVE-2011-2507 MLIST:[oss-security] 20110628 CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities  View
545044 50419 CVE-2011-2507 URL:http://www.openwall.com/lists/oss-security/2011/06/28/2  View
545045 50419 CVE-2011-2507 MLIST:[oss-security] 20110628 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities  View
545046 50419 CVE-2011-2507 URL:http://www.openwall.com/lists/oss-security/2011/06/28/6  View
545047 50419 CVE-2011-2507 MLIST:[oss-security] 20110628 Re: [Phpmyadmin-security] CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities  View
545048 50419 CVE-2011-2507 URL:http://www.openwall.com/lists/oss-security/2011/06/28/8  View
545049 50419 CVE-2011-2507 MLIST:[oss-security] 20110629 Re: CVE Request: phpMyAdmin 3.4 Multiple Vulnerabilities  View
545050 50419 CVE-2011-2507 URL:http://www.openwall.com/lists/oss-security/2011/06/29/11  View
545051 50419 CVE-2011-2507 MISC:http://0x6a616d6573.blogspot.com/2011/07/phpmyadmin-fud.html  View
545052 50419 CVE-2011-2507 MISC:http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html  View
545053 50419 CVE-2011-2507 MISC:http://ha.xxor.se/2011/07/phpmyadmin-3x-pregreplace-rce-poc.html  View
545054 50419 CVE-2011-2507 MISC:http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt  View
545055 50419 CVE-2011-2507 CONFIRM:http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=69fb0f8e7dc38075427aceaf09bcac697d0590ff  View
545056 50419 CVE-2011-2507 CONFIRM:http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/  View
545057 50419 CVE-2011-2507 CONFIRM:http://www.phpmyadmin.net/home_page/security/PMASA-2011-7.php  View
545058 50419 CVE-2011-2507 DEBIAN:DSA-2286  View
545059 50419 CVE-2011-2507 URL:http://www.debian.org/security/2011/dsa-2286  View
545060 50419 CVE-2011-2507 FEDORA:FEDORA-2011-9144  View
545061 50419 CVE-2011-2507 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html  View
545062 50419 CVE-2011-2507 MANDRIVA:MDVSA-2011:124  View
545063 50419 CVE-2011-2507 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:124  View
545064 50419 CVE-2011-2507 OSVDB:73613  View
545065 50419 CVE-2011-2507 URL:http://www.osvdb.org/73613  View
545066 50419 CVE-2011-2507 SECUNIA:45139  View
545067 50419 CVE-2011-2507 URL:http://secunia.com/advisories/45139  View
545068 50419 CVE-2011-2507 SECUNIA:45292  View
545069 50419 CVE-2011-2507 URL:http://secunia.com/advisories/45292  View
545070 50419 CVE-2011-2507 SECUNIA:45315  View
545071 50419 CVE-2011-2507 URL:http://secunia.com/advisories/45315  View
545072 50419 CVE-2011-2507 SREASON:8306  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27133 JVNDB-2012-002840 qemu-kvm の virtio_queue_notify におけるサービス運用妨害 (ゲストクラッシュ) の脆弱性 qemu-kvm の virtio_queue_notify は、virtqueue の数を適切に検証しないため、サービス運用妨害 (ゲストクラッシュ) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2011-2512 50419 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002840.html  View