phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-07-30 21:00
Updated : 2009-04-02 21:00
NVD link : CVE-2001-1060
Mitre link : CVE-2001-1060
JSON object : View
CWE
Products Affected
phpmyadmin
- phpmyadmin