| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin | = 2.11.0= 2.11.0.0= 2.11.1= 2.11.1.0= 2.11.1.1= 2.11.1.2= 2.11.2= 2.11.2.0= 2.11.2.1= 2.11.2.2= 2.11.3= 2.11.3.0= 2.11.4≤ 2.11.4 |
phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery (CSRF) attacks by using crafted cookies.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free