Language:
https://bugzilla.novell.com/show_bug.cgi?id=814678
https://bugzilla.novell.com/show_bug.cgi?id=824301
https://bugzilla.novell.com/show_bug.cgi?id=824302
https://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html
Severity: Medium
ID: 75055
File Name: openSUSE-2013-524.nasl
Version: 1.6
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 6/13/2014
Updated: 1/19/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Factor: High
Score: 7.0
Risk Factor: Medium
Base Score: 6
Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P
Risk Factor: Medium
Base Score: 6.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: p-cpe:/a:novell:opensuse:phpmyadmin, cpe:/o:novell:opensuse:12.2, cpe:/o:novell:opensuse:12.3
Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/13/2013
Core Impact
Metasploit (phpMyAdmin Authenticated Remote Code Execution via preg_replace())