CVE-2007-1325: High severity phpMyAdmin phpMyAdmin vulnerability
The PMAArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion on arrays provided by users, which allows context-dependent attackers to cause a denial of service (web server crash) via an array with many dimensions. NOTE: it could be argued that this vulnerability is caused by a problem in PHP (CVE-2006-1549) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in phpMyAdmin.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1325?
CVE-2007-1325 is considered a denial of service vulnerability that can crash the web server.
How do I fix CVE-2007-1325?
To fix CVE-2007-1325, upgrade phpMyAdmin to version 2.10.0.2 or later.
What version of phpMyAdmin is affected by CVE-2007-1325?
CVE-2007-1325 affects phpMyAdmin versions prior to 2.10.0.2.
Can CVE-2007-1325 be exploited remotely?
Yes, CVE-2007-1325 can be exploited by context-dependent attackers who provide malicious arrays.
What kind of attack does CVE-2007-1325 facilitate?
CVE-2007-1325 allows attackers to create a denial of service by causing excessive recursion on user-provided arrays.