ID de Prueba:	1.3.6.1.4.1.25623.1.0.100077
Categoría:	Web application abuses
Título:	phpMyAdmin Code Injection and XSS Vulnerability
Resumen:	phpMyAdmin is prone to a remote PHP code-injection vulnerability and; to a cross-site scripting vulnerability.
Descripción:	Summary: phpMyAdmin is prone to a remote PHP code-injection vulnerability and to a cross-site scripting vulnerability. Vulnerability Impact: An attacker can exploit this issue to inject and execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system. Other attacks are also possible. Affected Software/OS: Versions prior to phpMyAdmin 2.11.9.5 and 3.1.3.1 are vulnerable. Solution: Update to version 2.11.9.5 / 3.1.3.1 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1151 BugTraq ID: 34236 http://www.securityfocus.com/bid/34236 Bugtraq: 20090609 CVE-2009-1151: phpMyAdmin Remote Code Execution Proof of Concept (Google Search) http://www.securityfocus.com/archive/1/504191/100/0/threaded Debian Security Information: DSA-1824 (Google Search) http://www.debian.org/security/2009/dsa-1824 https://www.exploit-db.com/exploits/8921 http://security.gentoo.org/glsa/glsa-200906-03.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:115 http://labs.neohapsis.com/2009/04/06/about-cve-2009-1151/ http://www.gnucitizen.org/blog/cve-2009-1151-phpmyadmin-remote-code-execution-proof-of-concept/ http://secunia.com/advisories/34430 http://secunia.com/advisories/34642 http://secunia.com/advisories/35585 http://secunia.com/advisories/35635 SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.