CVE-2011-0987: Input Validation
The PMABookmarkget function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by creating a bookmark.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0987?
The severity of CVE-2011-0987 is classified as medium due to the potential for unauthorized SQL queries by authenticated users.
How do I fix CVE-2011-0987?
To fix CVE-2011-0987, upgrade phpMyAdmin to version 2.11.11.3 or later, or 3.3.9.2 or later.
What versions of phpMyAdmin are affected by CVE-2011-0987?
CVE-2011-0987 affects phpMyAdmin versions 2.11.x prior to 2.11.11.3 and 3.3.x prior to 3.3.9.2.
What type of attack can be executed using CVE-2011-0987?
CVE-2011-0987 allows remote authenticated users to execute arbitrary SQL queries by manipulating bookmarks.
Is CVE-2011-0987 a local or remote vulnerability?
CVE-2011-0987 is a remote vulnerability that requires authenticated access to exploit.