VULNERABILITY INTELLIGENCE
CVE-2011-2505
CVSS score6.4 MEDIUM
EPSS probability12.88%
CISA KEVNot currently listed
Published2011-07-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P
Description
libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSION superglobal array via a crafted request, related to a "remote variable manipulation vulnerability."
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')