CVE-2013-5003

Published: Jul 31, 2013Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via (1) the scale parameter to pmd_pdf.php or (2) the pdf_page_number parameter to schema_export.php.

Affected (22)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 3.5.0.0
Phpmyadmin Phpmyadmin	Version 3.5.1.0
Phpmyadmin Phpmyadmin	Version 3.5.2.0
Phpmyadmin Phpmyadmin	Version 3.5.2.1
Phpmyadmin Phpmyadmin	Version 3.5.2.2
Phpmyadmin Phpmyadmin	Version 3.5.3.0
Phpmyadmin Phpmyadmin	Version 3.5.4
Phpmyadmin Phpmyadmin	Version 3.5.5
Phpmyadmin Phpmyadmin	Version 3.5.6
Phpmyadmin Phpmyadmin	Version 3.5.7
Phpmyadmin Phpmyadmin	Version 3.5.7 rc1
Phpmyadmin Phpmyadmin	Version 3.5.8.1
Phpmyadmin Phpmyadmin	Version 3.5.8
Phpmyadmin Phpmyadmin	Version 3.5.8 rc1

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.0.0
Phpmyadmin Phpmyadmin	Version 4.0.0 rc2
Phpmyadmin Phpmyadmin	Version 4.0.0 rc3
Phpmyadmin Phpmyadmin	Version 4.0.1
Phpmyadmin Phpmyadmin	Version 4.0.2
Phpmyadmin Phpmyadmin	Version 4.0.3
Phpmyadmin Phpmyadmin	Version 4.0.4.1
Phpmyadmin Phpmyadmin	Version 4.0.4