NVD

Id
3080  
Name
CVE-2008-3197  
Description
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-07-16  
Modified Date
2012-11-26  
Seq
2008-3197  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
19594 3080 CVE-2008-3197 SUSE-SR:2009:003  View
19595 3080 CVE-2008-3197 http://sourceforge.net/project/shownotes.php?release_id=613660  View
19596 3080 CVE-2008-3197 DSA-1641  View
19597 3080 CVE-2008-3197 MDVSA-2008:202  View
19598 3080 CVE-2008-3197 [oss-security] 20080715 CVE request: phpmyadmin < 2.11.7.1  View
19599 3080 CVE-2008-3197 http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0  View
19600 3080 CVE-2008-3197 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-5  View
19601 3080 CVE-2008-3197 ADV-2008-2116  View
19602 3080 CVE-2008-3197 phpmyadmin-multi-csrf(43846)  View
19603 3080 CVE-2008-3197 http://yehg.net/lab/pr0js/advisories/XSRF_ConvertCharset_inPhpMyAdmin2.11.7.pdf  View
19604 3080 CVE-2008-3197 http://yehg.net/lab/pr0js/advisories/XSRF_CreateDB_inPhpMyAdmin2.11.7.pdf  View
19605 3080 CVE-2008-3197 FEDORA-2008-6502  View
19606 3080 CVE-2008-3197 FEDORA-2008-6450  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50715 JVNDB-2008-006025 phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性 phpMyAdmin には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2008-3197 33310 CVE-2008-3197 3080 3.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006025.html 2008-07-15 2012-12-20 View