CVE-2008-5621
- State
- Published
- Severity
- Not scored
- Published
- Dec 17, 2008
- Updated
- Aug 7, 2024
- Reserved
- Dec 16, 2008
Description
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tbl_structure.php with a modified table parameter. NOTE: other unspecified pages are also reachable, but they have the same root cause. NOTE: this can be leveraged to conduct SQL injection attacks and execute arbitrary code.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SR:2009:003vendor-advisory
- ADV-2008-3501vdb-entry
- GLSA-200903-32vendor-advisory
- DSA-1723vendor-advisory
- phpmyadmin-tblstructure-csrf(47168)vdb-entry
- 4753third-party-advisory
- ADV-2008-3402vdb-entry
- 50894vdb-entry
- FEDORA-2008-11221vendor-advisory
- 33146third-party-advisory
- http://www.phpmyadmin.net/home_page/security/PMASA-2008-10.php
- 33822third-party-advisory
- 33246third-party-advisory
- [oss-security] 20090212 CVE-2008-5621 is a duplicate (was: Re: CVE request: phpMyAdmin < 3.1.1.0 (SQL injection through XSRF on several pages ))mailing-list
- 32720vdb-entry
- 33912third-party-advisory
- 7382exploit
- 33076third-party-advisory
- http://typo3.org/teams/security/security-bulletins/typo3-20081222-1/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.