CVE-2008-4096
EUVD-2008-408018.09.2008, 15:04
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| phpmyadmin | phpmyadmin | 𝑥 ≤ 2.11.9 |
| phpmyadmin | phpmyadmin | 2.0 |
| phpmyadmin | phpmyadmin | 2.0.0 |
| phpmyadmin | phpmyadmin | 2.0.1 |
| phpmyadmin | phpmyadmin | 2.0.2 |
| phpmyadmin | phpmyadmin | 2.0.3 |
| phpmyadmin | phpmyadmin | 2.0.4 |
| phpmyadmin | phpmyadmin | 2.0.5 |
| phpmyadmin | phpmyadmin | 2.1 |
| phpmyadmin | phpmyadmin | 2.1.0 |
| phpmyadmin | phpmyadmin | 2.1.1 |
| phpmyadmin | phpmyadmin | 2.1.2 |
| phpmyadmin | phpmyadmin | 2.10.0 |
| phpmyadmin | phpmyadmin | 2.10.0.0 |
| phpmyadmin | phpmyadmin | 2.10.0.1 |
| phpmyadmin | phpmyadmin | 2.10.0.2 |
| phpmyadmin | phpmyadmin | 2.10.1 |
| phpmyadmin | phpmyadmin | 2.10.01 |
| phpmyadmin | phpmyadmin | 2.10.1.0 |
| phpmyadmin | phpmyadmin | 2.10.2 |
| phpmyadmin | phpmyadmin | 2.10.2.0 |
| phpmyadmin | phpmyadmin | 2.10.3 |
| phpmyadmin | phpmyadmin | 2.10.3.0 |
| phpmyadmin | phpmyadmin | 2.10.3rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.0 |
| phpmyadmin | phpmyadmin | 2.11.0.0 |
| phpmyadmin | phpmyadmin | 2.11.0beta1:beta1 |
| phpmyadmin | phpmyadmin | 2.11.0rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.1 |
| phpmyadmin | phpmyadmin | 2.11.1.0 |
| phpmyadmin | phpmyadmin | 2.11.1.1 |
| phpmyadmin | phpmyadmin | 2.11.1.2 |
| phpmyadmin | phpmyadmin | 2.11.1rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.2 |
| phpmyadmin | phpmyadmin | 2.11.2.0 |
| phpmyadmin | phpmyadmin | 2.11.2.1 |
| phpmyadmin | phpmyadmin | 2.11.2.2 |
| phpmyadmin | phpmyadmin | 2.11.3 |
| phpmyadmin | phpmyadmin | 2.11.3.0 |
| phpmyadmin | phpmyadmin | 2.11.3rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.4 |
| phpmyadmin | phpmyadmin | 2.11.4.0 |
| phpmyadmin | phpmyadmin | 2.11.4rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.5 |
| phpmyadmin | phpmyadmin | 2.11.5.0 |
| phpmyadmin | phpmyadmin | 2.11.5.1 |
| phpmyadmin | phpmyadmin | 2.11.5.2 |
| phpmyadmin | phpmyadmin | 2.11.5rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.6 |
| phpmyadmin | phpmyadmin | 2.11.6rc1:rc1 |
| phpmyadmin | phpmyadmin | 2.11.7 |
| phpmyadmin | phpmyadmin | 2.11.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References