Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
phpMyAdmin Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2013-3239 - Vulnerability Database
phpMyAdmin

phpMyAdmin Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2013-3239

Medium
Reference: CVE-2013-3239
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-3239
Title: phpMyAdmin Improper Control of Generation of Code (Code Injection) Vulnerability
Overview:

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 when a SaveDir directory is configured allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file leading to interpretation of this file as an executable file by the Apache HTTP Server as demonstrated by a .php.sql filename.