CVE-2008-4096

libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.

• phpmyadmin phpmyadmin (<= 2.11.9) • phpmyadmin phpmyadmin 2.0 • phpmyadmin phpmyadmin 2.0.0 • phpmyadmin phpmyadmin 2.0.1 • phpmyadmin phpmyadmin 2.0.2 • phpmyadmin phpmyadmin 2.0.3 • phpmyadmin phpmyadmin 2.0.4 • phpmyadmin phpmyadmin 2.0.5 • phpmyadmin phpmyadmin 2.1 • phpmyadmin phpmyadmin 2.1.0 • phpmyadmin phpmyadmin 2.1.1 • phpmyadmin phpmyadmin 2.1.2 • phpmyadmin phpmyadmin 2.10.0 • phpmyadmin phpmyadmin 2.10.0.0 • phpmyadmin phpmyadmin 2.10.0.1 • phpmyadmin phpmyadmin 2.10.0.2 • phpmyadmin phpmyadmin 2.10.1 • phpmyadmin phpmyadmin 2.10.01 • phpmyadmin phpmyadmin 2.10.1.0 • phpmyadmin phpmyadmin 2.10.2 • phpmyadmin phpmyadmin 2.10.2.0 • phpmyadmin phpmyadmin 2.10.3 • phpmyadmin phpmyadmin 2.10.3.0 • phpmyadmin phpmyadmin 2.10.3rc1 • phpmyadmin phpmyadmin 2.11.0 • phpmyadmin phpmyadmin 2.11.0.0 • phpmyadmin phpmyadmin 2.11.0beta1 • phpmyadmin phpmyadmin 2.11.0rc1 • phpmyadmin phpmyadmin 2.11.1 • phpmyadmin phpmyadmin 2.11.1.0 • phpmyadmin phpmyadmin 2.11.1.1 • phpmyadmin phpmyadmin 2.11.1.2 • phpmyadmin phpmyadmin 2.11.1rc1 • phpmyadmin phpmyadmin 2.11.2 • phpmyadmin phpmyadmin 2.11.2.0 • phpmyadmin phpmyadmin 2.11.2.1 • phpmyadmin phpmyadmin 2.11.2.2 • phpmyadmin phpmyadmin 2.11.3 • phpmyadmin phpmyadmin 2.11.3.0 • phpmyadmin phpmyadmin 2.11.3rc1 • phpmyadmin phpmyadmin 2.11.4 • phpmyadmin phpmyadmin 2.11.4.0 • phpmyadmin phpmyadmin 2.11.4rc1 • phpmyadmin phpmyadmin 2.11.5 • phpmyadmin phpmyadmin 2.11.5.0 • phpmyadmin phpmyadmin 2.11.5.1 • phpmyadmin phpmyadmin 2.11.5.2 • phpmyadmin phpmyadmin 2.11.5rc1 • phpmyadmin phpmyadmin 2.11.6 • phpmyadmin phpmyadmin 2.11.6rc1 • phpmyadmin phpmyadmin 2.11.7 • phpmyadmin phpmyadmin 2.11.8