Unknown
CVE-2013-3239
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
Unknown
(0 users assessed)Unknown
(0 users assessed)Unknown
Unknown
Unknown
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
- phpmyadmin
Products
- phpmyadmin 3.5.0.0,
- phpmyadmin 3.5.1.0,
- phpmyadmin 3.5.2.0,
- phpmyadmin 3.5.2.1,
- phpmyadmin 3.5.2.2,
- phpmyadmin 3.5.3.0,
- phpmyadmin 3.5.4,
- phpmyadmin 3.5.5,
- phpmyadmin 3.5.6,
- phpmyadmin 3.5.7,
- phpmyadmin 3.5.8,
- phpmyadmin 4.0.0
References
Advisory
Additional Info
Technical Analysis
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below: