6.5
CVE-2011-0987
- EPSS 2.73%
- Veröffentlicht 14.02.2011 22:00:06
- Zuletzt bearbeitet 16.06.2026 23:28:22
- Erkennungen
LoginThe PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by creating a bookmark.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version 2.11.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.1.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.1.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.1.2
Phpmyadmin ≫ Phpmyadmin Version 2.11.2.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.2.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.2.2
Phpmyadmin ≫ Phpmyadmin Version 2.11.3.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.4.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.5.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.5.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.5.2
Phpmyadmin ≫ Phpmyadmin Version 2.11.6.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.7.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.7.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.8.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.9.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.9.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.9.2
Phpmyadmin ≫ Phpmyadmin Version 2.11.9.3
Phpmyadmin ≫ Phpmyadmin Version 2.11.9.4
Phpmyadmin ≫ Phpmyadmin Version 2.11.9.5
Phpmyadmin ≫ Phpmyadmin Version 2.11.9.6
Phpmyadmin ≫ Phpmyadmin Version 2.11.10.0
Phpmyadmin ≫ Phpmyadmin Version 2.11.10.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.11
Phpmyadmin ≫ Phpmyadmin Version 2.11.11.1
Phpmyadmin ≫ Phpmyadmin Version 2.11.11.2
Phpmyadmin ≫ Phpmyadmin Version 3.0.0
Phpmyadmin ≫ Phpmyadmin Version 3.0.0 Update alpha
Phpmyadmin ≫ Phpmyadmin Version 3.0.0 Update beta
Phpmyadmin ≫ Phpmyadmin Version 3.0.0 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.0.1
Phpmyadmin ≫ Phpmyadmin Version 3.0.1 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.0.1.1
Phpmyadmin ≫ Phpmyadmin Version 3.1.0
Phpmyadmin ≫ Phpmyadmin Version 3.1.0 Update beta1
Phpmyadmin ≫ Phpmyadmin Version 3.1.1
Phpmyadmin ≫ Phpmyadmin Version 3.1.1 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.1.2
Phpmyadmin ≫ Phpmyadmin Version 3.1.2 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.1.3
Phpmyadmin ≫ Phpmyadmin Version 3.1.3 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.1.3.1
Phpmyadmin ≫ Phpmyadmin Version 3.1.3.2
Phpmyadmin ≫ Phpmyadmin Version 3.1.4
Phpmyadmin ≫ Phpmyadmin Version 3.1.4 Update rc2
Phpmyadmin ≫ Phpmyadmin Version 3.1.5
Phpmyadmin ≫ Phpmyadmin Version 3.1.5 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.2.0
Phpmyadmin ≫ Phpmyadmin Version 3.2.0 Update beta1
Phpmyadmin ≫ Phpmyadmin Version 3.2.0 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.2.1
Phpmyadmin ≫ Phpmyadmin Version 3.2.1 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.2.2
Phpmyadmin ≫ Phpmyadmin Version 3.2.2 Update rc1
Phpmyadmin ≫ Phpmyadmin Version 3.3.0.0
Phpmyadmin ≫ Phpmyadmin Version 3.3.1.0
Phpmyadmin ≫ Phpmyadmin Version 3.3.2.0
Phpmyadmin ≫ Phpmyadmin Version 3.3.3.0
Phpmyadmin ≫ Phpmyadmin Version 3.3.4.0
Phpmyadmin ≫ Phpmyadmin Version 3.3.5.0
Phpmyadmin ≫ Phpmyadmin Version 3.3.5.1
Phpmyadmin ≫ Phpmyadmin Version 3.3.6
Phpmyadmin ≫ Phpmyadmin Version 3.3.7
Phpmyadmin ≫ Phpmyadmin Version 3.3.8
Phpmyadmin ≫ Phpmyadmin Version 3.3.8.1
Phpmyadmin ≫ Phpmyadmin Version 3.3.9.0
Phpmyadmin ≫ Phpmyadmin Version 3.3.9.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.73% | 0.841 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html
http://secunia.com/advisories/43478
http://www.mandriva.com/security/advisories?name=MDVSA-2011:026
http://www.vupen.com/english/advisories/2011/0385
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054525.html
http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=a5464b4daff0059cdf8c9e5f4d54a80e2dd2a5b0
http://secunia.com/advisories/43324
http://secunia.com/advisories/43391
http://www.debian.org/security/2011/dsa-2167
http://www.phpmyadmin.net/home_page/security/PMASA-2011-2.php
http://www.securityfocus.com/bid/46359
http://www.vupen.com/english/advisories/2011/0381
http://www.vupen.com/english/advisories/2011/0409
http://www.vupen.com/english/advisories/2011/0512
http://www.vupen.com/english/advisories/2011/0570
https://exchange.xforce.ibmcloud.com/vulnerabilities/65390