NVD

Id
51722  
Name
CVE-2009-4605  
Description
scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2010-01-19  
Modified Date
2010-05-06  
Seq
2009-4605  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262050 51722 CVE-2009-4605 SUSE-SR:2010:001  View
262051 51722 CVE-2009-4605 http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/QA_2_11/phpMyAdmin/scripts/setup.php?r1=13149&r2=13148&pathrev=13149  View
262052 51722 CVE-2009-4605 http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin?view=rev&revision=13149  View
262053 51722 CVE-2009-4605 DSA-2034  View
262054 51722 CVE-2009-4605 http://www.phpmyadmin.net/home_page/security/PMASA-2010-3.php  View
262055 51722 CVE-2009-4605 ADV-2010-0910  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39279 JVNDB-2010-005064 phpMyAdmin の scripts/setup.php におけるクロスサイトリクエストフォージェリ (CSRF) 攻撃を実行される脆弱性 phpMyAdmin の scripts/setup.php は、(1) configuration および (2) v[0] パラメータの値上で unserialize 関数を呼び出すため、クロスサイトリクエストフォージェリ (CSRF) 攻撃を実行される脆弱性が存在します。 CVE-2009-4605 42036 CVE-2009-4605 51722 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005064.html 2010-01-15 2012-12-20 View