Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.5
CVSSv2

CVE-2008-3197

Published: 16/07/2008 Updated: 08/08/2017
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Subscribe to Phpmyadmin

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in phpMyAdmin prior to 2.11.7.1 allows remote malicious users to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set.

Vulnerable Product Search on Vulmon Subscribe to Product

phpmyadmin phpmyadmin 2.0.4

phpmyadmin phpmyadmin 2.0.5

phpmyadmin phpmyadmin 2.10.0.2

phpmyadmin phpmyadmin 2.10.01

phpmyadmin phpmyadmin 2.10.3rc1

phpmyadmin phpmyadmin 2.11.0

phpmyadmin phpmyadmin 2.11.1.2

phpmyadmin phpmyadmin 2.11.1rc1

phpmyadmin phpmyadmin 2.11.4

phpmyadmin phpmyadmin 2.11.4.0

phpmyadmin phpmyadmin 2.11.6

phpmyadmin phpmyadmin 2.11.6rc1

phpmyadmin phpmyadmin 2.2.0_rc2

phpmyadmin phpmyadmin 2.2.0_rc3

phpmyadmin phpmyadmin 2.2_pre2

phpmyadmin phpmyadmin 2.2_rc1

phpmyadmin phpmyadmin 2.5.1

phpmyadmin phpmyadmin 2.5.2

phpmyadmin phpmyadmin 2.5.5_rc2

phpmyadmin phpmyadmin 2.5.6_rc1

phpmyadmin phpmyadmin 2.5.6_rc2

phpmyadmin phpmyadmin 2.6.1_pl1

phpmyadmin phpmyadmin 2.6.1_pl3

phpmyadmin phpmyadmin 2.6.3_pl1

phpmyadmin phpmyadmin 2.6.4

phpmyadmin phpmyadmin 2.7.0_beta1

phpmyadmin phpmyadmin 2.7.0_pl1

phpmyadmin phpmyadmin 2.8.0.3

phpmyadmin phpmyadmin 2.8.1

phpmyadmin phpmyadmin 2.9.0.1

phpmyadmin phpmyadmin 2.9.0.2

phpmyadmin phpmyadmin 2.9.1_rc2

phpmyadmin phpmyadmin 2.9.2

phpmyadmin phpmyadmin 2.0.0

phpmyadmin phpmyadmin 2.0.1

phpmyadmin phpmyadmin 2.1.1

phpmyadmin phpmyadmin 2.1.2

phpmyadmin phpmyadmin 2.10.0

phpmyadmin phpmyadmin 2.10.2

phpmyadmin phpmyadmin 2.10.2.0

phpmyadmin phpmyadmin 2.11.0rc1

phpmyadmin phpmyadmin 2.11.1

phpmyadmin phpmyadmin 2.11.2.2

phpmyadmin phpmyadmin 2.11.3

phpmyadmin phpmyadmin 2.11.5.0

phpmyadmin phpmyadmin 2.11.5.1

phpmyadmin phpmyadmin 2.2.0

phpmyadmin phpmyadmin 2.2.0_pre1

phpmyadmin phpmyadmin 2.2.5

phpmyadmin phpmyadmin 2.2.6

phpmyadmin phpmyadmin 2.3.1

phpmyadmin phpmyadmin 2.3.2

phpmyadmin phpmyadmin 2.5.4

phpmyadmin phpmyadmin 2.5.5

phpmyadmin phpmyadmin 2.0.2

phpmyadmin phpmyadmin 2.0.3

phpmyadmin phpmyadmin 2.10.0.0

phpmyadmin phpmyadmin 2.10.0.1

phpmyadmin phpmyadmin 2.10.3

phpmyadmin phpmyadmin 2.10.3.0

phpmyadmin phpmyadmin 2.11.1.0

phpmyadmin phpmyadmin 2.11.1.1

phpmyadmin phpmyadmin 2.11.3.0

phpmyadmin phpmyadmin 2.11.3rc1

phpmyadmin phpmyadmin 2.11.5.2

phpmyadmin phpmyadmin 2.11.5rc1

phpmyadmin phpmyadmin 2.2.0_pre2

phpmyadmin phpmyadmin 2.2.0_rc1

phpmyadmin phpmyadmin 2.2.7_pl1

phpmyadmin phpmyadmin 2.2_pre1

phpmyadmin phpmyadmin 2.4.0

phpmyadmin phpmyadmin 2.5.0

phpmyadmin phpmyadmin 2.5.5_pl1

phpmyadmin phpmyadmin 2.5.5_rc1

phpmyadmin phpmyadmin 2.6.0_pl3

phpmyadmin phpmyadmin 2.6.1

phpmyadmin phpmyadmin 2.6.2_rc1

phpmyadmin phpmyadmin 2.6.3

phpmyadmin phpmyadmin 2.6.4_rc1

phpmyadmin phpmyadmin 2.7

phpmyadmin phpmyadmin 2.7.0

phpmyadmin phpmyadmin 2.8.0.1

phpmyadmin phpmyadmin 2.8.0.2

phpmyadmin phpmyadmin 2.9

phpmyadmin phpmyadmin 2.9.0

phpmyadmin phpmyadmin 2.9.1.1

phpmyadmin phpmyadmin 2.9.1_rc1

phpmyadmin phpmyadmin 2.6.0_pl1

phpmyadmin phpmyadmin 2.6.0_pl2

phpmyadmin phpmyadmin 2.6.2_dev

phpmyadmin phpmyadmin 2.6.2_pl1

phpmyadmin phpmyadmin 2.6.4_pl3

phpmyadmin phpmyadmin 2.6.4_pl4

phpmyadmin phpmyadmin 2.7_pl1

phpmyadmin phpmyadmin 2.8.0

phpmyadmin phpmyadmin 2.8.3

phpmyadmin phpmyadmin 2.8.4

phpmyadmin phpmyadmin 2.9.0_dev

phpmyadmin phpmyadmin 2.9.0_rc1

phpmyadmin phpmyadmin 2.9.1

phpmyadmin phpmyadmin 2.0

phpmyadmin phpmyadmin 2.1

phpmyadmin phpmyadmin 2.1.0

phpmyadmin phpmyadmin 2.10.1

phpmyadmin phpmyadmin 2.10.1.0

phpmyadmin phpmyadmin 2.11.0.0

phpmyadmin phpmyadmin 2.11.0beta1

phpmyadmin phpmyadmin 2.11.2

phpmyadmin phpmyadmin 2.11.2.0

phpmyadmin phpmyadmin 2.11.2.1

phpmyadmin phpmyadmin 2.11.4rc1

phpmyadmin phpmyadmin 2.11.5

phpmyadmin phpmyadmin 2.11.7.0

phpmyadmin phpmyadmin 2.2

phpmyadmin phpmyadmin 2.2.2

phpmyadmin phpmyadmin 2.2.3

phpmyadmin phpmyadmin 2.2.4

phpmyadmin phpmyadmin 2.2_rc2

phpmyadmin phpmyadmin 2.2_rc3

phpmyadmin phpmyadmin 2.5.2_pl1

phpmyadmin phpmyadmin 2.5.3

phpmyadmin phpmyadmin 2.5.7

phpmyadmin phpmyadmin 2.5.7_pl1

phpmyadmin phpmyadmin 2.6.1_rc1

phpmyadmin phpmyadmin 2.6.2

phpmyadmin phpmyadmin 2.6.4_pl1

phpmyadmin phpmyadmin 2.6.4_pl2

phpmyadmin phpmyadmin 2.7.0_pl2

phpmyadmin phpmyadmin 2.7.0_rc1

phpmyadmin phpmyadmin 2.8.1_dev

phpmyadmin phpmyadmin 2.8.2

phpmyadmin phpmyadmin 2.9.0.3

phpmyadmin phpmyadmin 2.9.0_beta1

phpmyadmin phpmyadmin 2.9_rc1

Vendor Advisories

Debian Security Advisories: DSA-1641-1 phpmyadmin -- several vulnerabilities
Several remote vulnerabilities have been discovered in phpMyAdmin, a tool to administrate MySQL databases over the web The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-4096 Remote authenticated users could execute arbitrary code on the host running phpMyAdmin through manipulation of a script par ...

References

CWE-352http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2008-5http://yehg.net/lab/pr0js/advisories/XSRF_CreateDB_inPhpMyAdmin2.11.7.pdfhttp://secunia.com/advisories/31115http://yehg.net/lab/pr0js/advisories/XSRF_ConvertCharset_inPhpMyAdmin2.11.7.pdfhttp://www.openwall.com/lists/oss-security/2008/07/15/6http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0http://www.debian.org/security/2008/dsa-1641http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.htmlhttp://secunia.com/advisories/33822http://www.mandriva.com/security/advisories?name=MDVSA-2008:202http://sourceforge.net/project/shownotes.php?release_id=613660http://www.vupen.com/english/advisories/2008/2116/referenceshttp://secunia.com/advisories/31097https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00652.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-July/msg00590.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/43846https://nvd.nist.govhttps://www.debian.org/security/./dsa-1641
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook