CVE-2010-3055
phpmyadmin - several vulnerabilities
EPSS 14.7%
描述
The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request.
如何修補 CVE-2010-3055
要修補 CVE-2010-3055,請將受影響套件升級到下列已修補版本。
- Debian/phpmyadmin—升級至 4:3.0.0 或更新版本
- Debian/phpmyadmin—升級至 4:2.11.8.1-5+lenny5 或更新版本
- Debian/phpmyadmin—升級至 4:2.11.8.1-5+lenny6 或更新版本
CVE-2010-3055 正在被利用嗎?
中等 — EPSS 為 14.7%,可持續追蹤但非最高優先。
受影響套件(3)
- from 0, < 4:3.0.0
- from 0, < 4:2.11.8.1-5+lenny5
- from 0, < 4:2.11.8.1-5+lenny6