Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2011-2719

Date: August 1, 2011

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.

Language: PHP

Severity Score

Related Resources (24)

http://www.openwall.com/lists/oss-security/2011/07/26/10
http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=571cdc6ff4bf375871b594f4e06f8ad3159d1754
http://www.securityfocus.com/bid/48874
http://osvdb.org/74112
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/68769
https://security-tracker.debian.org/tracker/CVE-2011-2719
http://www.openwall.com/lists/oss-security/2011/07/25/4
https://bugzilla.redhat.com/show_bug.cgi?id=725384
http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php
http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html
http://www.securityfocus.com/archive/1/519155/100/0/threaded
http://secunia.com/advisories/45365
http://www.securityfocus.com/archive/1/518967/100/0/threaded
http://seclists.org/fulldisclosure/2011/Jul/300
http://securityreason.com/securityalert/8322
http://www.mandriva.com/security/advisories?name=MDVSA-2011:124
https://nvd.nist.gov/vuln/detail/CVE-2011-2719
http://secunia.com/advisories/45515
http://www.debian.org/security/2011/dsa-2286
http://secunia.com/advisories/45315
http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7
http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt
https://www.mend.io/vulnerability-database/CVE-2011-2719

Severity Score

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us