CVE-2001-1060

Published: Jul 31, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.

Affected (13)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 2.0.1
Phpmyadmin Phpmyadmin	Version 2.0.2
Phpmyadmin Phpmyadmin	Version 2.0.3
Phpmyadmin Phpmyadmin	Version 2.0.4
Phpmyadmin Phpmyadmin	Version 2.0.5
Phpmyadmin Phpmyadmin	Version 2.0
Phpmyadmin Phpmyadmin	Version 2.1.1
Phpmyadmin Phpmyadmin	Version 2.1.2
Phpmyadmin Phpmyadmin	Version 2.1
Phpmyadmin Phpmyadmin	Version 2.2_pre1
Phpmyadmin Phpmyadmin	Version 2.2_rc1
Phpmyadmin Phpmyadmin	Version 2.2_rc2
Phpmyadmin Phpmyadmin	Version 2.2_rc3

References (6)

http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/200596

Source: cve@mitre.org

http://www.securityfocus.com/bid/3121

Source: cve@mitre.org

Patch

http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/200596

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3121

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.