← Database

CVE-2010-3055

HIGH CVSS: 7.5 Published: 2010-08-24 Modified: 2026-06-16

Description

The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request.

Affected Platforms

Phpmyadmin Phpmyadmin

Weakness Type

CWE-264

References