TROYANOSYVIRUS
Voltar para CVEs

CVE-2009-3697

N/A

Descricao

SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters.

Detalhes CVE

Pontuacao CVSS v3.1N/A
Publicado10/16/2009
Ultima modificacao4/23/2026
Fontenvd
Avistamentos honeypot0

Produtos afetados

phpmyadmin:phpmyadmin

Fraquezas (CWE)

CWE-89

Referencias

http://bugs.gentoo.org/show_bug.cgi?id=288899(af854a3a-2127-422b-91ae-364da2661108)
http://freshmeat.net/projects/phpmyadmin/releases/306667(af854a3a-2127-422b-91ae-364da2661108)
http://freshmeat.net/projects/phpmyadmin/releases/306669(af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=oss-security&m=125553728512853&w=2(af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=oss-security&m=125561979001460&w=2(af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/37016(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/36658(af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/2899(af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=528769(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.