Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-3239

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gg36-9346-9qx9

phpMyAdmin Remote Code Execution phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.

gitlab/packagist/phpmyadmin/phpmyadmin/CVE-2013-3239

Improper Control of Generation of Code ('Code Injection') phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.