CVE-2011-2505: phpMyAdmin remote variable manipulation
Summary
CVE-2011-2505: phpMyAdmin remote variable manipulation. Affects phpmyadmin/phpmyadmin across 2 version ranges.
>= 3.0, < 3.3.10.2
>= 3.4, < 3.4.3.1
Fixed in 3.3.10.2 or 3.4.3.1, depending on the release line you run. How to fix ↓
Also tracked for
- phpmyadmin · Debian:11
The same CVE-2011-2505 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
phpMyAdmin is a popular web-based database management tool written in PHP. It provides a user-friendly interface for managing MySQL databases. The Swekey authentication feature in phpMyAdmin versions 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 is vulnerable to remote variable manipulation. This vulnerability allows remote attackers to modify the SESSION superglobal array by manipulating arbitrary parameters in the query string.
Vulnerability Detail
The vulnerability exists in the libraries/auth/swekey/swekey.auth.lib.php file of phpMyAdmin. This file assigns values to arbitrary parameters referenced in the query string without proper validation. As a result, an attacker can craft a malicious request to modify the SESSION superglobal array, potentially leading to unauthorized access or privilege escalation. This vulnerability is classified as CWE-94 (Improper Control of Generation of Code).
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 3.0, < 3.3.10.23.3.10.2composer require phpmyadmin/phpmyadmin:3.3.10.2 -
>= 3.4, < 3.4.3.13.4.3.1composer require phpmyadmin/phpmyadmin:3.4.3.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If upgrading phpMyAdmin is not immediately feasible, a temporary workaround is to disable the Swekey authentication feature. This can be done by modifying the phpMyAdmin configuration to remove or comment out the Swekey authentication related lines. However, it is strongly advised to upgrade to the patched version as soon as possible.
Conclusion
The phpMyAdmin Swekey authentication feature is vulnerable to remote variable manipulation, which can allow attackers to modify the SESSION superglobal array. To mitigate this vulnerability, it is recommended to upgrade phpMyAdmin to the patched versions or disable the Swekey authentication feature. Regularly updating software and following best security practices is crucial to protect against potential vulnerabilities. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for phpmyadmin/phpmyadmin →
FAQ
phpMyAdmin is a web-based database management tool for MySQL databases. It provides an intuitive interface for performing various database operations.
The Swekey authentication feature in phpMyAdmin allows users to authenticate using a Swekey hardware device, providing an additional layer of security.
Remote variable manipulation refers to the ability of an attacker to modify variables or data on a remote system by exploiting vulnerabilities in the target application.
By manipulating the SESSION superglobal array, an attacker could potentially gain unauthorized access to sensitive information or perform actions with elevated privileges.
There are no known public exploits for this vulnerability at the time of writing. However, it is important to apply the necessary patches or upgrades to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for phpmyadmin/phpmyadmin.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.