CVE-2008-3197
EUVD-2008-318716.07.2008, 18:41
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| phpmyadmin | phpmyadmin | 2.0 |
| phpmyadmin | phpmyadmin | 2.0.0 |
| phpmyadmin | phpmyadmin | 2.0.1 |
| phpmyadmin | phpmyadmin | 2.0.2 |
| phpmyadmin | phpmyadmin | 2.0.3 |
| phpmyadmin | phpmyadmin | 2.0.4 |
| phpmyadmin | phpmyadmin | 2.0.5 |
| phpmyadmin | phpmyadmin | 2.1 |
| phpmyadmin | phpmyadmin | 2.1.0 |
| phpmyadmin | phpmyadmin | 2.1.1 |
| phpmyadmin | phpmyadmin | 2.1.2 |
| phpmyadmin | phpmyadmin | 2.2 |
| phpmyadmin | phpmyadmin | 2.2.0 |
| phpmyadmin | phpmyadmin | 2.2.0_pre1:_pre1 |
| phpmyadmin | phpmyadmin | 2.2.0_pre2:_pre2 |
| phpmyadmin | phpmyadmin | 2.2.0_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.2.0_rc2:_rc2 |
| phpmyadmin | phpmyadmin | 2.2.0_rc3:_rc3 |
| phpmyadmin | phpmyadmin | 2.2.2 |
| phpmyadmin | phpmyadmin | 2.2.3 |
| phpmyadmin | phpmyadmin | 2.2.4 |
| phpmyadmin | phpmyadmin | 2.2.5 |
| phpmyadmin | phpmyadmin | 2.2.6 |
| phpmyadmin | phpmyadmin | 2.2.7_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.2_pre1:_pre1 |
| phpmyadmin | phpmyadmin | 2.2_pre2:_pre2 |
| phpmyadmin | phpmyadmin | 2.2_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.2_rc2:_rc2 |
| phpmyadmin | phpmyadmin | 2.2_rc3:_rc3 |
| phpmyadmin | phpmyadmin | 2.3.1 |
| phpmyadmin | phpmyadmin | 2.3.2 |
| phpmyadmin | phpmyadmin | 2.4.0 |
| phpmyadmin | phpmyadmin | 2.5.0 |
| phpmyadmin | phpmyadmin | 2.5.1 |
| phpmyadmin | phpmyadmin | 2.5.2 |
| phpmyadmin | phpmyadmin | 2.5.2_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.5.3 |
| phpmyadmin | phpmyadmin | 2.5.4 |
| phpmyadmin | phpmyadmin | 2.5.5 |
| phpmyadmin | phpmyadmin | 2.5.5_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.5.5_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.5.5_rc2:_rc2 |
| phpmyadmin | phpmyadmin | 2.5.6_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.5.6_rc2:_rc2 |
| phpmyadmin | phpmyadmin | 2.5.7 |
| phpmyadmin | phpmyadmin | 2.5.7_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.6.0_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.6.0_pl2:_pl2 |
| phpmyadmin | phpmyadmin | 2.6.0_pl3:_pl3 |
| phpmyadmin | phpmyadmin | 2.6.1 |
| phpmyadmin | phpmyadmin | 2.6.1_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.6.1_pl3:_pl3 |
| phpmyadmin | phpmyadmin | 2.6.1_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.6.2 |
| phpmyadmin | phpmyadmin | 2.6.2_dev:_dev |
| phpmyadmin | phpmyadmin | 2.6.2_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.6.2_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.6.3 |
| phpmyadmin | phpmyadmin | 2.6.3_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.6.4 |
| phpmyadmin | phpmyadmin | 2.6.4_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.6.4_pl2:_pl2 |
| phpmyadmin | phpmyadmin | 2.6.4_pl3:_pl3 |
| phpmyadmin | phpmyadmin | 2.6.4_pl4:_pl4 |
| phpmyadmin | phpmyadmin | 2.6.4_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.7 |
| phpmyadmin | phpmyadmin | 2.7.0 |
| phpmyadmin | phpmyadmin | 2.7.0_beta1:_beta1 |
| phpmyadmin | phpmyadmin | 2.7.0_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.7.0_pl2:_pl2 |
| phpmyadmin | phpmyadmin | 2.7.0_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.7_pl1:_pl1 |
| phpmyadmin | phpmyadmin | 2.8.0 |
| phpmyadmin | phpmyadmin | 2.8.0.1 |
| phpmyadmin | phpmyadmin | 2.8.0.2 |
| phpmyadmin | phpmyadmin | 2.8.0.3 |
| phpmyadmin | phpmyadmin | 2.8.1 |
| phpmyadmin | phpmyadmin | 2.8.1_dev:_dev |
| phpmyadmin | phpmyadmin | 2.8.2 |
| phpmyadmin | phpmyadmin | 2.8.3 |
| phpmyadmin | phpmyadmin | 2.8.4 |
| phpmyadmin | phpmyadmin | 2.9 |
| phpmyadmin | phpmyadmin | 2.9.0 |
| phpmyadmin | phpmyadmin | 2.9.0.1 |
| phpmyadmin | phpmyadmin | 2.9.0.2 |
| phpmyadmin | phpmyadmin | 2.9.0.3 |
| phpmyadmin | phpmyadmin | 2.9.0_beta1:_beta1 |
| phpmyadmin | phpmyadmin | 2.9.0_dev:_dev |
| phpmyadmin | phpmyadmin | 2.9.0_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.9.1 |
| phpmyadmin | phpmyadmin | 2.9.1.1 |
| phpmyadmin | phpmyadmin | 2.9.1_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.9.1_rc2:_rc2 |
| phpmyadmin | phpmyadmin | 2.9.2 |
| phpmyadmin | phpmyadmin | 2.9_rc1:_rc1 |
| phpmyadmin | phpmyadmin | 2.10.0 |
| phpmyadmin | phpmyadmin | 2.10.0.0 |
| phpmyadmin | phpmyadmin | 2.10.0.1 |
| phpmyadmin | phpmyadmin | 2.10.0.2 |
| phpmyadmin | phpmyadmin | 2.10.1 |
| phpmyadmin | phpmyadmin | 2.10.01 |
| phpmyadmin | phpmyadmin | 2.10.1.0 |
| phpmyadmin | phpmyadmin | 2.10.2 |
| phpmyadmin | phpmyadmin | 2.10.2.0 |
| phpmyadmin | phpmyadmin | 2.10.3 |
| phpmyadmin | phpmyadmin | 2.10.3.0 |
| phpmyadmin | phpmyadmin | 2.10.3rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.0 |
| phpmyadmin | phpmyadmin | 2.11.0.0 |
| phpmyadmin | phpmyadmin | 2.11.0beta1:beta1 |
| phpmyadmin | phpmyadmin | 2.11.0rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.1 |
| phpmyadmin | phpmyadmin | 2.11.1.0 |
| phpmyadmin | phpmyadmin | 2.11.1.1 |
| phpmyadmin | phpmyadmin | 2.11.1.2 |
| phpmyadmin | phpmyadmin | 2.11.1rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.2 |
| phpmyadmin | phpmyadmin | 2.11.2.0 |
| phpmyadmin | phpmyadmin | 2.11.2.1 |
| phpmyadmin | phpmyadmin | 2.11.2.2 |
| phpmyadmin | phpmyadmin | 2.11.3 |
| phpmyadmin | phpmyadmin | 2.11.3.0 |
| phpmyadmin | phpmyadmin | 2.11.3rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.4 |
| phpmyadmin | phpmyadmin | 2.11.4.0 |
| phpmyadmin | phpmyadmin | 2.11.4rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.5 |
| phpmyadmin | phpmyadmin | 2.11.5.0 |
| phpmyadmin | phpmyadmin | 2.11.5.1 |
| phpmyadmin | phpmyadmin | 2.11.5.2 |
| phpmyadmin | phpmyadmin | 2.11.5rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.6 |
| phpmyadmin | phpmyadmin | 2.11.6rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.7.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References