Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpMyAdmin 'server_databases.php' 远程命令执行漏洞
Vulnerability Description
phpMyAdmin 2.11.9.1之前版本的libraries/database_interface.lib.php 允许远程认证用户通过向具有一个包含由create_function处理的PHP序列的sort_by参数里的server_databases.php提交一个直接的请求以执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A