CVE-2009-1285
16.04.2009, 15:12
Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files.
| Vendor | Product | Version |
|---|---|---|
| phpmyadmin | phpmyadmin | 3.0.0 |
| phpmyadmin | phpmyadmin | 3.0.1 |
| phpmyadmin | phpmyadmin | 3.1.0 |
| phpmyadmin | phpmyadmin | 3.1.0.0 |
| phpmyadmin | phpmyadmin | 3.1.1 |
| phpmyadmin | phpmyadmin | 3.1.1:rc1 |
| phpmyadmin | phpmyadmin | 3.1.2 |
| phpmyadmin | phpmyadmin | 3.1.2:rc1 |
| phpmyadmin | phpmyadmin | 3.1.3 |
| phpmyadmin | phpmyadmin | 3.1.3:1 |
| phpmyadmin | phpmyadmin | 3.1.3:rc1 |
| phpmyadmin | phpmyadmin | 3.1.3.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References