CVE-2013-3238

Related Files

Gentoo Linux Security Advisory 201311-02

Posted Nov 4, 2013

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201311-2 - Multiple vulnerabilities have been found in phpMyAdmin, allowing remote authenticated attackers to execute arbitrary code, inject SQL code or conduct other attacks. Versions less than 4.0.5 are affected.

tags | advisory, remote, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2013-1937, CVE-2013-3238, CVE-2013-3239, CVE-2013-4995, CVE-2013-4996, CVE-2013-4997, CVE-2013-4998, CVE-2013-4999, CVE-2013-5000, CVE-2013-5001, CVE-2013-5002, CVE-2013-5003, CVE-2013-5029

SHA-256 | bdc5fc2fd976e67643d39f9d1d11505fb74cb58060d3a64f0597fbc5774c8c45

Download | Favorite | View

Mandriva Linux Security Advisory 2013-160

Posted May 3, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-160 - An updated phpmyadmin package fixes multiple security vulnerabilities. In some PHP versions, the preg_replace function can be tricked into executing arbitrary PHP code on the server. This is done by passing a crafted argument as the regular expression, containing a null byte. phpMyAdmin does not correctly sanitize an argument passed to preg_replace when using the Replace table prefix feature, opening the way to this vulnerability. phpMyAdmin can be configured to save an export file on the web server, via its SaveDir directive. With this in place, it's possible, either via a crafted filename template or a crafted table name, to save a double extension file like foobar.php.sql. In turn, an Apache webserver on which there is no definition for the MIME type sql will treat this saved file as a.php script, leading to remote code execution.

tags | advisory, remote, web, arbitrary, php, vulnerability, code execution

systems | linux, mandriva

advisories | CVE-2013-3238, CVE-2013-3239

SHA-256 | 768d3d828b28c886594ff7bb01ff35caab0c6b267c92575a346fdf2e220d098b

Download | Favorite | View

phpMyAdmin Authenticated Remote Code Execution

Posted Apr 29, 2013

Authored by Janek Vind aka waraxe | Site metasploit.com

This Metasploit module exploits a PREG_REPLACE_EVAL vulnerability in phpMyAdmin's replace_prefix_tbl within libraries/mult_submits.inc.php via db_settings.php. This affects versions 3.5.x below 3.5.8.1 and 4.0.0 below 4.0.0-rc3. PHP versions greater than 5.4.6 are not vulnerable.

tags | exploit, php

advisories | CVE-2013-3238, OSVDB-92793

SHA-256 | cde46aba3bb442a48c277780f2ae183ec296c40bdbad1fb176830924a1405679

Download | Favorite | View

phpMyAdmin 3.5.8 / 4.0.0-RC2 Code Execution / LFI / Overwrite

Posted Apr 25, 2013

Authored by Janek Vind aka waraxe | Site waraxe.us

phpMyAdmin versions 3.5.8 and 4.0.0-RC2 suffer from multiple remote code execution, local file inclusion, and array overwrite vulnerabilities.

tags | exploit, remote, local, vulnerability, code execution, file inclusion

advisories | CVE-2013-3238, CVE-2013-3239, CVE-2013-3240, CVE-2013-3241

SHA-256 | 5f5b20d982ae97824512b1c23808b9c17b328dae83d316eee98cdebbab52a1c6

Download | Favorite | View