Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-3197

Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set.

Published

2008-07-16T18:41:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 3.5 (LOW)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

6.8

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application phpmyadmin phpmyadmin 2.0 Yes
Application phpmyadmin phpmyadmin 2.0.0 Yes
Application phpmyadmin phpmyadmin 2.0.1 Yes
Application phpmyadmin phpmyadmin 2.0.2 Yes
Application phpmyadmin phpmyadmin 2.0.3 Yes
Application phpmyadmin phpmyadmin 2.0.4 Yes
Application phpmyadmin phpmyadmin 2.0.5 Yes
Application phpmyadmin phpmyadmin 2.1 Yes
Application phpmyadmin phpmyadmin 2.1.0 Yes
Application phpmyadmin phpmyadmin 2.1.1 Yes
Application phpmyadmin phpmyadmin 2.1.2 Yes
Application phpmyadmin phpmyadmin 2.2 Yes
Application phpmyadmin phpmyadmin 2.2.0 Yes
Application phpmyadmin phpmyadmin 2.2.0_pre1 Yes
Application phpmyadmin phpmyadmin 2.2.0_pre2 Yes
Application phpmyadmin phpmyadmin 2.2.0_rc1 Yes
Application phpmyadmin phpmyadmin 2.2.0_rc2 Yes
Application phpmyadmin phpmyadmin 2.2.0_rc3 Yes
Application phpmyadmin phpmyadmin 2.2.2 Yes
Application phpmyadmin phpmyadmin 2.2.3 Yes
Application phpmyadmin phpmyadmin 2.2.4 Yes
Application phpmyadmin phpmyadmin 2.2.5 Yes
Application phpmyadmin phpmyadmin 2.2.6 Yes
Application phpmyadmin phpmyadmin 2.2.7_pl1 Yes
Application phpmyadmin phpmyadmin 2.2_pre1 Yes
Application phpmyadmin phpmyadmin 2.2_pre2 Yes
Application phpmyadmin phpmyadmin 2.2_rc1 Yes
Application phpmyadmin phpmyadmin 2.2_rc2 Yes
Application phpmyadmin phpmyadmin 2.2_rc3 Yes
Application phpmyadmin phpmyadmin 2.3.1 Yes
Application phpmyadmin phpmyadmin 2.3.2 Yes
Application phpmyadmin phpmyadmin 2.4.0 Yes
Application phpmyadmin phpmyadmin 2.5.0 Yes
Application phpmyadmin phpmyadmin 2.5.1 Yes
Application phpmyadmin phpmyadmin 2.5.2 Yes
Application phpmyadmin phpmyadmin 2.5.2_pl1 Yes
Application phpmyadmin phpmyadmin 2.5.3 Yes
Application phpmyadmin phpmyadmin 2.5.4 Yes
Application phpmyadmin phpmyadmin 2.5.5 Yes
Application phpmyadmin phpmyadmin 2.5.5_pl1 Yes
Application phpmyadmin phpmyadmin 2.5.5_rc1 Yes
Application phpmyadmin phpmyadmin 2.5.5_rc2 Yes
Application phpmyadmin phpmyadmin 2.5.6_rc1 Yes
Application phpmyadmin phpmyadmin 2.5.6_rc2 Yes
Application phpmyadmin phpmyadmin 2.5.7 Yes
Application phpmyadmin phpmyadmin 2.5.7_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.0_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.0_pl2 Yes
Application phpmyadmin phpmyadmin 2.6.0_pl3 Yes
Application phpmyadmin phpmyadmin 2.6.1 Yes
Application phpmyadmin phpmyadmin 2.6.1_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.1_pl3 Yes
Application phpmyadmin phpmyadmin 2.6.1_rc1 Yes
Application phpmyadmin phpmyadmin 2.6.2 Yes
Application phpmyadmin phpmyadmin 2.6.2_dev Yes
Application phpmyadmin phpmyadmin 2.6.2_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.2_rc1 Yes
Application phpmyadmin phpmyadmin 2.6.3 Yes
Application phpmyadmin phpmyadmin 2.6.3_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.4 Yes
Application phpmyadmin phpmyadmin 2.6.4_pl1 Yes
Application phpmyadmin phpmyadmin 2.6.4_pl2 Yes
Application phpmyadmin phpmyadmin 2.6.4_pl3 Yes
Application phpmyadmin phpmyadmin 2.6.4_pl4 Yes
Application phpmyadmin phpmyadmin 2.6.4_rc1 Yes
Application phpmyadmin phpmyadmin 2.7 Yes
Application phpmyadmin phpmyadmin 2.7.0 Yes
Application phpmyadmin phpmyadmin 2.7.0_beta1 Yes
Application phpmyadmin phpmyadmin 2.7.0_pl1 Yes
Application phpmyadmin phpmyadmin 2.7.0_pl2 Yes
Application phpmyadmin phpmyadmin 2.7.0_rc1 Yes
Application phpmyadmin phpmyadmin 2.7_pl1 Yes
Application phpmyadmin phpmyadmin 2.8.0 Yes
Application phpmyadmin phpmyadmin 2.8.0.1 Yes
Application phpmyadmin phpmyadmin 2.8.0.2 Yes
Application phpmyadmin phpmyadmin 2.8.0.3 Yes
Application phpmyadmin phpmyadmin 2.8.1 Yes
Application phpmyadmin phpmyadmin 2.8.1_dev Yes
Application phpmyadmin phpmyadmin 2.8.2 Yes
Application phpmyadmin phpmyadmin 2.8.3 Yes
Application phpmyadmin phpmyadmin 2.8.4 Yes
Application phpmyadmin phpmyadmin 2.9 Yes
Application phpmyadmin phpmyadmin 2.9.0 Yes
Application phpmyadmin phpmyadmin 2.9.0.1 Yes
Application phpmyadmin phpmyadmin 2.9.0.2 Yes
Application phpmyadmin phpmyadmin 2.9.0.3 Yes
Application phpmyadmin phpmyadmin 2.9.0_beta1 Yes
Application phpmyadmin phpmyadmin 2.9.0_dev Yes
Application phpmyadmin phpmyadmin 2.9.0_rc1 Yes
Application phpmyadmin phpmyadmin 2.9.1 Yes
Application phpmyadmin phpmyadmin 2.9.1.1 Yes
Application phpmyadmin phpmyadmin 2.9.1_rc1 Yes
Application phpmyadmin phpmyadmin 2.9.1_rc2 Yes
Application phpmyadmin phpmyadmin 2.9.2 Yes
Application phpmyadmin phpmyadmin 2.9_rc1 Yes
Application phpmyadmin phpmyadmin 2.10.0 Yes
Application phpmyadmin phpmyadmin 2.10.0.0 Yes
Application phpmyadmin phpmyadmin 2.10.0.1 Yes
Application phpmyadmin phpmyadmin 2.10.0.2 Yes
Application phpmyadmin phpmyadmin 2.10.1 Yes
Application phpmyadmin phpmyadmin 2.10.01 Yes
Application phpmyadmin phpmyadmin 2.10.1.0 Yes
Application phpmyadmin phpmyadmin 2.10.2 Yes
Application phpmyadmin phpmyadmin 2.10.2.0 Yes
Application phpmyadmin phpmyadmin 2.10.3 Yes
Application phpmyadmin phpmyadmin 2.10.3.0 Yes
Application phpmyadmin phpmyadmin 2.10.3rc1 Yes
Application phpmyadmin phpmyadmin 2.11.0 Yes
Application phpmyadmin phpmyadmin 2.11.0.0 Yes
Application phpmyadmin phpmyadmin 2.11.0beta1 Yes
Application phpmyadmin phpmyadmin 2.11.0rc1 Yes
Application phpmyadmin phpmyadmin 2.11.1 Yes
Application phpmyadmin phpmyadmin 2.11.1.0 Yes
Application phpmyadmin phpmyadmin 2.11.1.1 Yes
Application phpmyadmin phpmyadmin 2.11.1.2 Yes
Application phpmyadmin phpmyadmin 2.11.1rc1 Yes
Application phpmyadmin phpmyadmin 2.11.2 Yes
Application phpmyadmin phpmyadmin 2.11.2.0 Yes
Application phpmyadmin phpmyadmin 2.11.2.1 Yes
Application phpmyadmin phpmyadmin 2.11.2.2 Yes
Application phpmyadmin phpmyadmin 2.11.3 Yes
Application phpmyadmin phpmyadmin 2.11.3.0 Yes
Application phpmyadmin phpmyadmin 2.11.3rc1 Yes
Application phpmyadmin phpmyadmin 2.11.4 Yes
Application phpmyadmin phpmyadmin 2.11.4.0 Yes
Application phpmyadmin phpmyadmin 2.11.4rc1 Yes
Application phpmyadmin phpmyadmin 2.11.5 Yes
Application phpmyadmin phpmyadmin 2.11.5.0 Yes
Application phpmyadmin phpmyadmin 2.11.5.1 Yes
Application phpmyadmin phpmyadmin 2.11.5.2 Yes
Application phpmyadmin phpmyadmin 2.11.5rc1 Yes
Application phpmyadmin phpmyadmin 2.11.6 Yes
Application phpmyadmin phpmyadmin 2.11.6rc1 Yes
Application phpmyadmin phpmyadmin 2.11.7.0 Yes
References