PT-2011-3906 · Phpmyadmin · Phpmyadmin

Frans Pehrson · Published 2011-07-14 · Updated 2018-10-09 · CVE-2011-2507

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.x prior to 3.3.10.2 phpMyAdmin versions 3.4.x prior to 3.4.3.1

Description The issue is related to the Synchronize implementation in phpMyAdmin, where the libraries/server synchronize.lib.php file does not properly quote regular expressions. This allows remote authenticated users to inject a PCRE e (aka PREG REPLACE EVAL) modifier, which can lead to the execution of arbitrary PHP code. The exploitation is possible by modifying the SESSION superglobal array.

Recommendations For phpMyAdmin versions 3.x prior to 3.3.10.2, update to version 3.3.10.2 or later. For phpMyAdmin versions 3.4.x prior to 3.4.3.1, update to version 3.4.3.1 or later.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2011-2507

DSA-2286-1

Affected Products

Phpmyadmin

References · 25

• 🔥 http://ha.xxor.se/2011/07/phpmyadmin-3x-pregreplace-rce-poc.html · Exploit
• 🔥 http://ha.xxor.se/2011/07/phpmyadmin-3x-multiple-remote-code.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-2507 · Security Note
• http://debian.org/security/2011/dsa-2286 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062719.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2507 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-2507 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2507 · Vendor Advisory
• http://secunia.com/advisories/45139 · Vendor Advisory
• http://phpmyadmin.net/home_page/security/PMASA-2011-7.php · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:124 · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/06/28/2 · Note
• http://openwall.com/lists/oss-security/2011/06/28/6 · Note
• http://0x6a616d6573.blogspot.com/2011/07/phpmyadmin-fud.html · Note
• http://secunia.com/advisories/45315 · Note