NVD

Id
3954  
Name
CVE-2008-4096  
Description
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-18  
Modified Date
2011-03-07  
Seq
2008-4096  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
25137 3954 CVE-2008-4096 http://fd.the-wildcat.de/pma_e36a091q11.php  View
25138 3954 CVE-2008-4096 SUSE-SR:2009:003  View
25139 3954 CVE-2008-4096 GLSA-200903-32  View
25140 3954 CVE-2008-4096 http://typo3.org/teams/security/security-bulletins/typo3-20080916-1/  View
25141 3954 CVE-2008-4096 DSA-1641  View
25142 3954 CVE-2008-4096 MDVSA-2008:202  View
25143 3954 CVE-2008-4096 [phpmyadmin-news] 20080915 phpMyAdmin 2.11.9.1 is released  View
25144 3954 CVE-2008-4096 [oss-security] 20080915 phpMyAdmin code execution (CVE request)  View
25145 3954 CVE-2008-4096 [oss-security] 20080915 Re: phpMyAdmin code execution (CVE request)  View
25146 3954 CVE-2008-4096 http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-7  View
25147 3954 CVE-2008-4096 31188  View
25148 3954 CVE-2008-4096 ADV-2008-2585  View
25149 3954 CVE-2008-4096 ADV-2008-2619  View
25150 3954 CVE-2008-4096 phpmyadmin-serverdatabases-code-execution(45157)  View
25151 3954 CVE-2008-4096 https://bugzilla.redhat.com/show_bug.cgi?id=462430  View
25152 3954 CVE-2008-4096 FEDORA-2008-8269  View
25153 3954 CVE-2008-4096 FEDORA-2008-8286  View
25154 3954 CVE-2008-4096 FEDORA-2008-8335  View
25155 3954 CVE-2008-4096 FEDORA-2008-8370  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50910 JVNDB-2008-006220 phpMyAdmin の libraries/database_interface.lib.php における任意のコードを実行される脆弱性 phpMyAdmin の libraries/database_interface.lib.php は、create_function によって処理されるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-4096 34209 CVE-2008-4096 3954 8.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006220.html 2008-09-15 2012-12-20 View