The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x prior to 2.11.11.3, and 3.3.x prior to 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by creating a bookmark.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
phpmyadmin phpmyadmin 3.0.1.1 |
||
phpmyadmin phpmyadmin 3.2.1 |
||
phpmyadmin phpmyadmin 2.11.11.2 |
||
phpmyadmin phpmyadmin 2.11.1.2 |
||
phpmyadmin phpmyadmin 3.1.4 |
||
phpmyadmin phpmyadmin 3.1.3 |
||
phpmyadmin phpmyadmin 2.11.5.1 |
||
phpmyadmin phpmyadmin 2.11.5.0 |
||
phpmyadmin phpmyadmin 3.3.8.1 |
||
phpmyadmin phpmyadmin 3.2.0 |
||
phpmyadmin phpmyadmin 3.1.2 |
||
phpmyadmin phpmyadmin 2.11.9.0 |
||
phpmyadmin phpmyadmin 3.1.0 |
||
phpmyadmin phpmyadmin 2.11.9.1 |
||
phpmyadmin phpmyadmin 3.3.3.0 |
||
phpmyadmin phpmyadmin 3.0.0 |
||
phpmyadmin phpmyadmin 3.3.4.0 |
||
phpmyadmin phpmyadmin 2.11.5.2 |
||
phpmyadmin phpmyadmin 2.11.2.2 |
||
phpmyadmin phpmyadmin 2.11.8.0 |
||
phpmyadmin phpmyadmin 3.3.1.0 |
||
phpmyadmin phpmyadmin 3.3.7 |
||
phpmyadmin phpmyadmin 2.11.11 |
||
phpmyadmin phpmyadmin 2.11.4.0 |
||
phpmyadmin phpmyadmin 3.1.5 |
||
phpmyadmin phpmyadmin 2.11.2.1 |
||
phpmyadmin phpmyadmin 3.1.1 |
||
phpmyadmin phpmyadmin 3.3.5.0 |
||
phpmyadmin phpmyadmin 2.11.9.5 |
||
phpmyadmin phpmyadmin 2.11.10.0 |
||
phpmyadmin phpmyadmin 2.11.6.0 |
||
phpmyadmin phpmyadmin 3.3.0.0 |
||
phpmyadmin phpmyadmin 3.3.6 |
||
phpmyadmin phpmyadmin 3.3.2.0 |
||
phpmyadmin phpmyadmin 2.11.7.0 |
||
phpmyadmin phpmyadmin 3.3.9.0 |
||
phpmyadmin phpmyadmin 2.11.9.6 |
||
phpmyadmin phpmyadmin 3.1.3.2 |
||
phpmyadmin phpmyadmin 2.11.2.0 |
||
phpmyadmin phpmyadmin 2.11.9.2 |
||
phpmyadmin phpmyadmin 2.11.9.3 |
||
phpmyadmin phpmyadmin 3.3.5.1 |
||
phpmyadmin phpmyadmin 3.3.9.1 |
||
phpmyadmin phpmyadmin 2.11.1.1 |
||
phpmyadmin phpmyadmin 3.0.1 |
||
phpmyadmin phpmyadmin 2.11.11.1 |
||
phpmyadmin phpmyadmin 2.11.9.4 |
||
phpmyadmin phpmyadmin 3.1.3.1 |
||
phpmyadmin phpmyadmin 2.11.7.1 |
||
phpmyadmin phpmyadmin 2.11.3.0 |
||
phpmyadmin phpmyadmin 3.3.8 |
||
phpmyadmin phpmyadmin 3.2.2 |
||
phpmyadmin phpmyadmin 2.11.1.0 |
||
phpmyadmin phpmyadmin 2.11.0 |
||
phpmyadmin phpmyadmin 2.11.10.1 |
Vulmon