CVE-2011-2507

libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly quote regular expressions, which allows remote authenticated users to inject a PCRE e (aka PREG_REPLACE_EVAL) modifier, and consequently execute arbitrary PHP code, by leveraging the ability to modify the SESSION superglobal array.

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

2.97% chance of exploitation in the next 30 days, 86th percentile

Published

2011-07-14

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://ha.xxor.se/2011/07/phpmyadmin-3x-pregreplace-rce-poc.html

References

• CVE Record
• NVD entry

Related

• CVE-2011-2506
• CVE-2011-2522
• CVE-2011-2505
• CVE-2011-2523
• CVE-2011-2474
• CVE-2011-2543