Description

phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.

Remediation

References

CVE-2001-1060

Related Vulnerabilities

WordPress Plugin WP Forum Server Cross-Site Scripting and SQL Injection Vulnerabilities (1.7.3)

WordPress Plugin Katalyst TimThumb 'timthumb.php' Arbitrary File Upload (1.0)

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.18)

ATutor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-1000002)

WordPress Plugin Social Like Box and Page by WpDevArt Unspecified Vulnerability (0.8.39)

Severity

High

Classification

CVE-2001-1060

Tags

Missing Update Known Vulnerabilities