CVE-2011-2506

Publication date 14 July 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
phpmyadmin 13.10 saucy
Fixed 4:3.4.3.1-1
13.04 raring
Fixed 4:3.4.3.1-1
12.10 quantal
Fixed 4:3.4.3.1-1
12.04 LTS precise
Fixed 4:3.4.3.1-1
11.10 oneiric
Fixed 4:3.4.3.1-1
11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid Ignored end of life
8.04 LTS hardy Ignored end of life