NVD

Id
39076  
Name
CVE-2013-3239  
Description
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-04-25  
Modified Date
2013-11-18  
Seq
2013-3239  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
200046 39076 CVE-2013-3239 20130424 [waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin  View
200047 39076 CVE-2013-3239 FEDORA-2013-7000  View
200048 39076 CVE-2013-3239 FEDORA-2013-6977  View
200049 39076 CVE-2013-3239 FEDORA-2013-6928  View
200050 39076 CVE-2013-3239 openSUSE-SU-2013:1065  View
200051 39076 CVE-2013-3239 MDVSA-2013:160  View
200052 39076 CVE-2013-3239 http://www.phpmyadmin.net/home_page/security/PMASA-2013-3.php  View
200053 39076 CVE-2013-3239 https://github.com/phpmyadmin/phpmyadmin/commit/1f6bc0b707002e26cab216b9e57b4d5de764de48  View
200054 39076 CVE-2013-3239 https://github.com/phpmyadmin/phpmyadmin/commit/d3fafdfba0807068196655e9b6d16c5d1d3ccf8a  View
200055 39076 CVE-2013-3239 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0133  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20916 JVNDB-2013-002491 phpMyAdmin における任意のコードを実行される脆弱性 phpMyAdmin には、SaveDir ディレクトリが構成される場合、任意のコードを実行される脆弱性が存在します。 CVE-2013-3239 63181 CVE-2013-3239 39076 4.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002491.html 2013-04-24 2013-11-25 View