CVE-2001-1060: High severity phpMyAdmin phpMyAdmin vulnerability
Published Jul 31, 2001
·Updated
phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tblcopy.php, or (2) the strRenameTableOK argument in tblrename.php.
Affected Software
13 affected components
phpMyAdmin phpMyAdmin=2.1.1
phpMyAdmin phpMyAdmin=2.1.2
phpMyAdmin phpMyAdmin=2.2_pre1
phpMyAdmin phpMyAdmin=2.0.4
phpMyAdmin phpMyAdmin=2.0.2
phpMyAdmin phpMyAdmin=2.0.3
phpMyAdmin phpMyAdmin=2.1
phpMyAdmin phpMyAdmin=2.0.1
phpMyAdmin phpMyAdmin=2.2_rc2
phpMyAdmin phpMyAdmin=2.2_rc3
phpMyAdmin phpMyAdmin=2.2_rc1
phpMyAdmin phpMyAdmin=2.0
phpMyAdmin phpMyAdmin=2.0.5
Remediation
Patch Available
Event History
Jul 31, 2001
CVE Published
04:00 AM
Feb 2, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1060?
CVE-2001-1060 is considered critical as it allows remote attackers to execute arbitrary commands.
2
How do I fix CVE-2001-1060?
To fix CVE-2001-1060, upgrade phpMyAdmin to version 2.2 or later, as earlier versions are vulnerable.
3
Which versions of phpMyAdmin are affected by CVE-2001-1060?
CVE-2001-1060 affects phpMyAdmin versions 2.2.0rc3 and earlier.
4
What kind of attacks can be executed due to CVE-2001-1060?
CVE-2001-1060 allows attackers to execute arbitrary commands through crafted input in specific PHP script arguments.
5
Is there a workaround for CVE-2001-1060 if I cannot upgrade phpMyAdmin?
There is no officially documented workaround for CVE-2001-1060, so upgrading is the recommended solution.