CVEvulnerability

CVE-2011-2719

6.4 MEDIUM Published 2011-08-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-08-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-20

Description

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.

Affected configurations

• phpmyadmin phpmyadmin 3.0.0 • phpmyadmin phpmyadmin 3.0.1 • phpmyadmin phpmyadmin 3.0.1.1 • phpmyadmin phpmyadmin 3.1.0 • phpmyadmin phpmyadmin 3.1.1 • phpmyadmin phpmyadmin 3.1.2 • phpmyadmin phpmyadmin 3.1.3 • phpmyadmin phpmyadmin 3.1.3.1 • phpmyadmin phpmyadmin 3.1.3.2 • phpmyadmin phpmyadmin 3.1.4 • phpmyadmin phpmyadmin 3.1.5 • phpmyadmin phpmyadmin 3.2.0 • phpmyadmin phpmyadmin 3.2.1 • phpmyadmin phpmyadmin 3.2.2 • phpmyadmin phpmyadmin 3.3.0.0 • phpmyadmin phpmyadmin 3.3.1.0 • phpmyadmin phpmyadmin 3.3.2.0 • phpmyadmin phpmyadmin 3.3.3.0 • phpmyadmin phpmyadmin 3.3.4.0 • phpmyadmin phpmyadmin 3.3.5.0 • phpmyadmin phpmyadmin 3.3.5.1 • phpmyadmin phpmyadmin 3.3.6 • phpmyadmin phpmyadmin 3.3.7 • phpmyadmin phpmyadmin 3.3.8 • phpmyadmin phpmyadmin 3.3.8.1 • phpmyadmin phpmyadmin 3.3.9.0 • phpmyadmin phpmyadmin 3.3.9.1 • phpmyadmin phpmyadmin 3.3.9.2 • phpmyadmin phpmyadmin 3.3.10.0 • phpmyadmin phpmyadmin 3.3.10.1 • phpmyadmin phpmyadmin 3.3.10.2 • phpmyadmin phpmyadmin 3.4.0.0 • phpmyadmin phpmyadmin 3.4.1.0 • phpmyadmin phpmyadmin 3.4.2.0 • phpmyadmin phpmyadmin 3.4.3.0 • phpmyadmin phpmyadmin 3.4.3.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References