CVE-2013-3241: Medium severity phpMyAdmin phpMyAdmin vulnerability
export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users to inject values via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3241?
The severity of CVE-2013-3241 is classified as high due to the potential for remote authenticated users to exploit global variable overwrites.
How do I fix CVE-2013-3241?
To fix CVE-2013-3241, upgrade to phpMyAdmin version 4.0.0-rc3 or later.
What kind of attack does CVE-2013-3241 facilitate?
CVE-2013-3241 facilitates attacks that allow remote authenticated users to inject values into global variables via crafted requests.
Which versions of phpMyAdmin are affected by CVE-2013-3241?
CVE-2013-3241 affects phpMyAdmin versions prior to 4.0.0-rc3, particularly 4.0.0-rc2.
Who can exploit CVE-2013-3241?
CVE-2013-3241 can be exploited by remote authenticated users, making it a concern for systems where user access is granted.