CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2507

libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly quote regular expressions, which allows remote authenticated users to inject a PCRE e (aka PREG_REPLACE_EVAL) modifier, and consequently execute arbitrary PHP code, by leveraging the ability to modify the SESSION superglobal array.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.037

EPSS Ranking 87.6%

CVSS Severity

CVSS v2 Score 6.5

References

Products affected by CVE-2011-2507

Phpmyadmin » Phpmyadmin » Version: 3.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.0
Phpmyadmin » Phpmyadmin » Version: 3.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1
Phpmyadmin » Phpmyadmin » Version: 3.0.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.0.1.1
Phpmyadmin » Phpmyadmin » Version: 3.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0
Phpmyadmin » Phpmyadmin » Version: 3.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.1
Phpmyadmin » Phpmyadmin » Version: 3.1.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.2
Phpmyadmin » Phpmyadmin » Version: 3.1.3

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3
Phpmyadmin » Phpmyadmin » Version: 3.1.3.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.1
Phpmyadmin » Phpmyadmin » Version: 3.1.3.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.3.2
Phpmyadmin » Phpmyadmin » Version: 3.1.4

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.4
Phpmyadmin » Phpmyadmin » Version: 3.1.5

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.5
Phpmyadmin » Phpmyadmin » Version: 3.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.0
Phpmyadmin » Phpmyadmin » Version: 3.2.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.1
Phpmyadmin » Phpmyadmin » Version: 3.2.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.2.2
Phpmyadmin » Phpmyadmin » Version: 3.3.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.0.0
Phpmyadmin » Phpmyadmin » Version: 3.3.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.1.0
Phpmyadmin » Phpmyadmin » Version: 3.3.10.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.10.0
Phpmyadmin » Phpmyadmin » Version: 3.3.10.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.10.1
Phpmyadmin » Phpmyadmin » Version: 3.3.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.2.0
Phpmyadmin » Phpmyadmin » Version: 3.3.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.3.0
Phpmyadmin » Phpmyadmin » Version: 3.3.4.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.4.0
Phpmyadmin » Phpmyadmin » Version: 3.3.5.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.0
Phpmyadmin » Phpmyadmin » Version: 3.3.5.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.1
Phpmyadmin » Phpmyadmin » Version: 3.3.6

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.6
Phpmyadmin » Phpmyadmin » Version: 3.3.7

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.7
Phpmyadmin » Phpmyadmin » Version: 3.3.8

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8
Phpmyadmin » Phpmyadmin » Version: 3.3.8.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8.1
Phpmyadmin » Phpmyadmin » Version: 3.3.9.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.0
Phpmyadmin » Phpmyadmin » Version: 3.3.9.1

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.1
Phpmyadmin » Phpmyadmin » Version: 3.3.9.2

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.2
Phpmyadmin » Phpmyadmin » Version: 3.4.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.0.0
Phpmyadmin » Phpmyadmin » Version: 3.4.1.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.1.0
Phpmyadmin » Phpmyadmin » Version: 3.4.2.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.2.0
Phpmyadmin » Phpmyadmin » Version: 3.4.3.0

cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2507

Products

Pricing

Contact Us