NVD

Id
5364  
Name
CVE-2008-5621  
Description
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tbl_structure.php with a modified table parameter. NOTE: other unspecified pages are also reachable, but they have the same root cause. NOTE: this can be leveraged to conduct SQL injection attacks and execute arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-16  
Modified Date
2011-03-07  
Seq
2008-5621  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
33685 5364 CVE-2008-5621 SUSE-SR:2009:003  View
33686 5364 CVE-2008-5621 GLSA-200903-32  View
33687 5364 CVE-2008-5621 4753  View
33688 5364 CVE-2008-5621 http://typo3.org/teams/security/security-bulletins/typo3-20081222-1/  View
33689 5364 CVE-2008-5621 DSA-1723  View
33690 5364 CVE-2008-5621 7382  View
33691 5364 CVE-2008-5621 [oss-security] 20090212 CVE-2008-5621 is a duplicate (was: Re: CVE request: phpMyAdmin < 3.1.1.0 (SQL injection through XSRF on several pages ))  View
33692 5364 CVE-2008-5621 http://www.phpmyadmin.net/home_page/security/PMASA-2008-10.php  View
33693 5364 CVE-2008-5621 32720  View
33694 5364 CVE-2008-5621 ADV-2008-3402  View
33695 5364 CVE-2008-5621 ADV-2008-3501  View
33696 5364 CVE-2008-5621 phpmyadmin-tblstructure-csrf(47168)  View
33697 5364 CVE-2008-5621 FEDORA-2008-11221  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47104 JVNDB-2008-002414 phpMyAdmin におけるクロスサイトリクエストフォージェリの脆弱性 phpMyAdmin には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2008-5621 35734 CVE-2008-5621 5364 6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002414.html 2008-12-17 2009-07-08 View