PT-2010-5491 · Phpmyadmin · Phpmyadmin

Jörg Sommer · Publicado 2010-12-17 · Atualizado 2022-05-17 · CVE-2010-4481

Positive Technologies (AI Summary)

CVSS v4.0

8.0

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 3.4.0-beta1

Description The issue allows remote attackers to bypass authentication and obtain sensitive information by making a direct request to "phpinfo.php", which calls the phpinfo() function.

Recommendations For versions prior to 3.4.0-beta1, update to version 3.4.0-beta1 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2010-4481

DSA-2139-1

GHSA-GMC7-JVV7-W245

Produtos afetados

Phpmyadmin

Referências · 17

• https://github.com/phpmyadmin/phpmyadmin · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2011:000 · Aviso do Fabricante
• http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=4d9fd005671b05c4d74615d5939ed45e4d019e4c · Nota
• http://debian.org/security/2010/dsa-2139 · Aviso do Fabricante
• http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commitdiff;h=4d9fd005671b05c4d74615d5939ed45e4d019e4c · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-4481 · Aviso do Fabricante
• http://secunia.com/advisories/42485 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-4481 · Nota de Segurança
• http://vupen.com/english/advisories/2011/0001 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/3238 · Aviso do Fabricante
• http://phpmyadmin.net/home_page/security/PMASA-2010-10.php · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-4481 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4481 · Nota
• https://osv.dev/vulnerability/GHSA-gmc7-jvv7-w245 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-4481 · Aviso do Fabricante