Detections
Analytics
phpMyAdmin import_blacklist Variable Overwriting
medium Nessus Plugin ID 22124
Language:
Synopsis
The remote web server contains a PHP application that is prone to multiple issues.Description
The version of phpMyAdmin installed on the remote host fails to properly protect the global 'import_blacklist' variable, which is used in the 'libraries/grab_globals.lib.php' script to protect global variables in its register_globals emulation layer. An unauthenticated attacker can exploit this flaw to overwrite arbitrary variables, thereby opening the application up to remote / local file include as well as cross-site scripting attacks.Solution
Upgrade to phpMyAdmin version 2.7.0-pl1 or later.See Also
http://www.hardened-php.net/advisory_252005.110.html
https://seclists.org/fulldisclosure/2005/Dec/272
http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2005-9
Plugin Details
Severity: Medium
ID: 22124
File Name: phpmyadmin_import_blacklist_overwrite.nasl
Version: 1.24
Type: remote
Family: CGI abuses
Published: 7/31/2006
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.7
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N
Vulnerability Information
CPE: cpe:/a:phpmyadmin:phpmyadmin
Required KB Items: www/phpMyAdmin, www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 12/7/2005
Reference Information
CVE: CVE-2005-4079
BID: 15761