CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2505

libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a "remote variable manipulation vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.246

EPSS Ranking 95.9%

CVSS Severity

CVSS v2 Score 6.4

References

Products affected by CVE-2011-2505

Phpmyadmin » Phpmyadmin » Version: 3.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0
Phpmyadmin » Phpmyadmin » Version: 3.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1
Phpmyadmin » Phpmyadmin » Version: 3.0.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1
Phpmyadmin » Phpmyadmin » Version: 3.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0
Phpmyadmin » Phpmyadmin » Version: 3.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1
Phpmyadmin » Phpmyadmin » Version: 3.1.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2
Phpmyadmin » Phpmyadmin » Version: 3.1.3

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3
Phpmyadmin » Phpmyadmin » Version: 3.1.3.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1
Phpmyadmin » Phpmyadmin » Version: 3.1.3.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2
Phpmyadmin » Phpmyadmin » Version: 3.1.4

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4
Phpmyadmin » Phpmyadmin » Version: 3.1.5

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5
Phpmyadmin » Phpmyadmin » Version: 3.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0
Phpmyadmin » Phpmyadmin » Version: 3.2.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1
Phpmyadmin » Phpmyadmin » Version: 3.2.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2
Phpmyadmin » Phpmyadmin » Version: 3.3.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.0.0
Phpmyadmin » Phpmyadmin » Version: 3.3.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.1.0
Phpmyadmin » Phpmyadmin » Version: 3.3.10.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.10.0
Phpmyadmin » Phpmyadmin » Version: 3.3.10.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.10.1
Phpmyadmin » Phpmyadmin » Version: 3.3.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.2.0
Phpmyadmin » Phpmyadmin » Version: 3.3.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.3.0
Phpmyadmin » Phpmyadmin » Version: 3.3.4.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.4.0
Phpmyadmin » Phpmyadmin » Version: 3.3.5.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.0
Phpmyadmin » Phpmyadmin » Version: 3.3.5.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.1
Phpmyadmin » Phpmyadmin » Version: 3.3.6

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.6
Phpmyadmin » Phpmyadmin » Version: 3.3.7

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.7
Phpmyadmin » Phpmyadmin » Version: 3.3.8

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8
Phpmyadmin » Phpmyadmin » Version: 3.3.8.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8.1
Phpmyadmin » Phpmyadmin » Version: 3.3.9.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.0
Phpmyadmin » Phpmyadmin » Version: 3.3.9.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.1
Phpmyadmin » Phpmyadmin » Version: 3.3.9.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.2
Phpmyadmin » Phpmyadmin » Version: 3.4.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.0.0
Phpmyadmin » Phpmyadmin » Version: 3.4.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.1.0
Phpmyadmin » Phpmyadmin » Version: 3.4.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.2.0
Phpmyadmin » Phpmyadmin » Version: 3.4.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2505

Products

Pricing

Contact Us