Test Kennung:	1.3.6.1.4.1.25623.1.0.51982
Kategorie:	CGI abuses
Titel:	phpMyAdmin Multiple Input Validation Vulnerabilities
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote version of phpMyAdmin, according to its version number, is vulnerable to multiple vulnerabilities that include the ability for an attacker to add an arbitrary SQL server, and the ability to execute arbitrary PHP code through a maliciously constructed database table name. Versions prior to 2.5.7-pl1 are vulnerable. Solution: Upgrade to 2.5.7-pl1 or later. Risk factor : High CVSS Score: 7.5
Querverweis:	BugTraq ID: 10629 Common Vulnerability Exposure (CVE) ID: CVE-2004-2632 http://www.securityfocus.com/bid/10629 Bugtraq: 20040628 php codes injection in phpMyAdmin version 2.5.7. (Google Search) http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html Bugtraq: 20040630 Re: php codes injection in phpMyAdmin version 2.5.7. (Google Search) http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html http://www.gentoo.org/security/en/glsa/glsa-200407-22.xml http://eagle.kecapi.com/sec/fd/phpMyAdmin.html http://www.osvdb.org/7315 http://securitytracker.com/alerts/2004/Jun/1010614.html http://secunia.com/advisories/11974 XForce ISS Database: phpmyadmin-code-manipulation(16555) https://exchange.xforce.ibmcloud.com/vulnerabilities/16555 Common Vulnerability Exposure (CVE) ID: CVE-2004-2631 Bugtraq: 20041018 phpMyAdmin: Vulnerability in MIME-based transformation (Google Search) http://marc.info/?l=bugtraq&m=109816584519779&w=2 http://www.securiteam.com/unixfocus/5QP040ADFW.html http://www.osvdb.org/7314 http://securitytracker.com/id?1010614 XForce ISS Database: phpmyadmin-php-injection(16542) https://exchange.xforce.ibmcloud.com/vulnerabilities/16542
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.