PT-2017-6686 · Phpmyadmin · Phpmybackuppro

Published 2017-07-21 · Updated 2017-07-25 · CVE-2015-3640

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpMyBackupPro versions 2.5 and earlier

Description The issue allows remote authenticated users to inject and execute arbitrary PHP scripts by exploiting the lack of proper escaping of the "." character in request parameters. This can be achieved by injecting scripts via the path, filename, and dirs parameters to the "scheduled.php" endpoint, and then making requests to the injected scripts.

Recommendations For phpMyBackupPro versions 2.5 and earlier, consider restricting access to the "scheduled.php" endpoint and the path, filename, and dirs parameters until a proper fix is applied. As a temporary workaround, avoid using the vulnerable parameters in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2015-3640

Affected Products

Phpmybackuppro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-3640 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3640 · Note
• http://securitytracker.com/id/1032250 · Note
• http://openwall.com/lists/oss-security/2015/05/04/4 · Note