NVD

Id
7978  
Name
CVE-2011-0987  
Description
The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user"s execution of a SQL query by creating a bookmark.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-02-14  
Modified Date
2011-03-10  
Seq
2011-0987  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45254 7978 CVE-2011-0987 FEDORA-2011-1373  View
45255 7978 CVE-2011-0987 FEDORA-2011-1408  View
45256 7978 CVE-2011-0987 FEDORA-2011-1282  View
45257 7978 CVE-2011-0987 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commit;h=a5464b4daff0059cdf8c9e5f4d54a80e2dd2a5b0  View
45258 7978 CVE-2011-0987 DSA-2167  View
45259 7978 CVE-2011-0987 MDVSA-2011:026  View
45260 7978 CVE-2011-0987 http://www.phpmyadmin.net/home_page/security/PMASA-2011-2.php  View
45261 7978 CVE-2011-0987 46359  View
45262 7978 CVE-2011-0987 ADV-2011-0381  View
45263 7978 CVE-2011-0987 ADV-2011-0385  View
45264 7978 CVE-2011-0987 ADV-2011-0409  View
45265 7978 CVE-2011-0987 ADV-2011-0512  View
45266 7978 CVE-2011-0987 ADV-2011-0570  View
45267 7978 CVE-2011-0987 phpmyadmin-bookmark-security-bypass(65390)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34038 JVNDB-2011-004280 phpMyAdmin の PMA_Bookmark_get 関数における別のユーザの SQL クエリの実行を誘発する脆弱性 phpMyAdmin の libraries/bookmark.lib.ph の PMA_Bookmark_get 関数は、ブックマーククエリを適切に制限しないため、別のユーザの SQL クエリの実行を誘発する脆弱性が存在します。 CVE-2011-0987 48894 CVE-2011-0987 7978 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004280.html 2011-02-11 2012-03-27 View