NetSight
IP …
high8.5Public exploit code

CVE-2008-4096

libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_database…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.

Affected products

VendorProductAffected versions
PhpmyadminPhpmyadmin
through 2.11.9
Versions 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3

Weakness classification

CWE-20

References