Description

phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.

Remediation

References

CVE-2001-1060

Related Vulnerabilities

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2687)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2022-23302)

WordPress Plugin Keyword Strategy Internal Links Multiple Cross-Site Scripting Vulnerabilities (2.0)

PHP Other Vulnerability (CVE-2007-4010)

WordPress Plugin WP Support Plus Responsive Ticket System Multiple Vulnerabilities (4.1)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2001-1060