Home > Vulnerability Database > CVE-2011-0987

Mend.io Vulnerability Database

CVE-2011-0987

Date: February 14, 2011

The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by creating a bookmark.

Language: PHP

Severity Score

6.3

Related Resources (21)

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054349.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2011-0987

Url: http://www.vupen.com/english/advisories/2011/0381

Url: http://www.securityfocus.com/bid/46359

Url: http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=a5464b4daff0059cdf8c9e5f4d54a80e2dd2a5b0

Url: http://www.vupen.com/english/advisories/2011/0409

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054355.html

Url: https://security-tracker.debian.org/tracker/CVE-2011-0987

Url: http://www.phpmyadmin.net/home_page/security/PMASA-2011-2.php

Url: http://www.vupen.com/english/advisories/2011/0512

Url: http://www.debian.org/security/2011/dsa-2167

Url: http://secunia.com/advisories/43391

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054525.html

Url: http://www.vupen.com/english/advisories/2011/0385

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-0987

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/65390

Url: http://www.vupen.com/english/advisories/2011/0570

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:026

Url: http://secunia.com/advisories/43324

Url: http://secunia.com/advisories/43478

Url: https://www.mend.io/vulnerability-database/CVE-2011-0987

Severity Score

6.3

Weakness Type (CWE)

Improper Input Validation

CWE-20

CVSS v3.1

Base Score:	6.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-0987

Date: February 14, 2011

Language: PHP

Severity Score

Related Resources (21)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?