CVE-2013-3239 phpMyAdmin Remote Code Execution
MediumCVSS 4.6
EPSS 8.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyadmin/phpmyadmin(Packagist) | >= 3.5.0, < 3.5.8.1 | 3.5.8.1 |
| debian/phpmyadmin(Debian:12) | < 4:3.4.11.1-2 | 4:3.4.11.1-2 |
| debian/phpmyadmin(Debian:14) | < 4:3.4.11.1-2 | 4:3.4.11.1-2 |
| debian/phpmyadmin(Debian:13) | < 4:3.4.11.1-2 | 4:3.4.11.1-2 |
| phpmyadmin/phpmyadmin | = 3.5.0.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.1.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.2.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.2.1 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.2.2 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.3.0 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.4 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.5 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.6 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.7 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.7-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 3.5.8-rc1 | No fix listed |
| phpmyadmin/phpmyadmin | = 4.0.0-rc2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit patch
- github.com patch
- github.com product
- FEDORA-2013-7000 vendor-advisory
- FEDORA-2013-6977 vendor-advisory
- FEDORA-2013-6928 vendor-advisory
- openSUSE-SU-2013:1065 vendor-advisory
- www.phpmyadmin.net vendor-advisory
- Debian Security Tracker CVE-2013-3239 vendor-advisory
- github.com
- 20130424 [waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin mailing-list
- MDVSA-2013:160 vendor-advisory
- wiki.mageia.org