CVE-2010-3055: High severity phpMyAdmin phpMyAdmin vulnerability
Published Aug 24, 2010
·Updated
The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request.
Affected Software
24 affected components
phpMyAdmin phpMyAdmin=2.11.1.2
phpMyAdmin phpMyAdmin=2.11.5.1
phpMyAdmin phpMyAdmin=2.11.5.0
phpMyAdmin phpMyAdmin=2.11.9.0
phpMyAdmin phpMyAdmin=2.11.9.1
phpMyAdmin phpMyAdmin=2.11.5.2
phpMyAdmin phpMyAdmin=2.11.2.2
phpMyAdmin phpMyAdmin=2.11.8.0
phpMyAdmin phpMyAdmin=2.11.4.0
phpMyAdmin phpMyAdmin=2.11.2.1
phpMyAdmin phpMyAdmin=2.11.9.5
phpMyAdmin phpMyAdmin=2.11.10.0
phpMyAdmin phpMyAdmin=2.11.6.0
phpMyAdmin phpMyAdmin=2.11.7.0
phpMyAdmin phpMyAdmin=2.11.9.6
phpMyAdmin phpMyAdmin=2.11.2.0
phpMyAdmin phpMyAdmin=2.11.9.2
phpMyAdmin phpMyAdmin=2.11.9.3
phpMyAdmin phpMyAdmin=2.11.1.1
phpMyAdmin phpMyAdmin=2.11.9.4
phpMyAdmin phpMyAdmin=2.11.7.1
phpMyAdmin phpMyAdmin=2.11.3.0
phpMyAdmin phpMyAdmin=2.11.1.0
phpMyAdmin phpMyAdmin=2.11.0
Remediation
Patch Available
Event History
Aug 24, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3055?
CVE-2010-3055 is classified as a high severity vulnerability due to the risk of remote code execution.
2
How do I fix CVE-2010-3055?
To fix CVE-2010-3055, upgrade to phpMyAdmin version 2.11.10.1 or later.
3
What versions of phpMyAdmin are affected by CVE-2010-3055?
CVE-2010-3055 affects phpMyAdmin versions 2.11.1.0 through 2.11.9.6.
4
Can exploiting CVE-2010-3055 allow attackers to gain access to my database?
Yes, exploiting CVE-2010-3055 can allow attackers to execute arbitrary PHP code, potentially compromising sensitive database information.
5
Is there a patch available for CVE-2010-3055?
Yes, a patch is included in the phpMyAdmin version 2.11.10.1 release which resolves the issues related to CVE-2010-3055.