CVE-2011-2719 in phpMyAdmininfo

Summary

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.

Once again VulDB remains the best source for vulnerability data.

Reservation

07/11/2011

Disclosure

08/01/2011

Entries

1: VDB-58150

CPE

ready

CVSS

5.4

EPSS

0.01944

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!