CVE-2009-3697
CVE-2009-3697
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters.
EPSS 2,6% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
phpmyadmin Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 4:3.2.2.1-1
Mettez à jour vers 4:3.2.2.1-1
phpmyadmin Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 4:3.2.2.1-1
Mettez à jour vers 4:3.2.2.1-1
phpmyadmin Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 4:3.2.2.1-1
Mettez à jour vers 4:3.2.2.1-1
Sources originales
- http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/
- http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php
- http://freshmeat.net/projects/phpmyadmin/releases/306667
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html
- http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html
- https://bugzilla.redhat.com/show_bug.cgi?id=528769
- http://marc.info/?l=oss-security&m=125553728512853&w=2
- http://freshmeat.net/projects/phpmyadmin/releases/306669
- http://marc.info/?l=oss-security&m=125561979001460&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53741
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html
- http://www.vupen.com/english/advisories/2009/2899
- http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html
- http://bugs.gentoo.org/show_bug.cgi?id=288899
- http://www.securityfocus.com/bid/36658
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
- http://secunia.com/advisories/37016
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:274
- https://nvd.nist.gov/vuln/detail/CVE-2009-3697