CVE-2011-2506

setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing…

published July 14, 2011

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09626 · 95.5th percentile
Published
2011-07-14T23:00Z
EPSS history
Timeline
  • 14 JUL 23:00Z
    setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing…
    cvelistv5