VULNERABILITY INTELLIGENCE
CVE-2011-2719
CVSS score6.4 MEDIUM
EPSS probability2.43%
CISA KEVNot currently listed
Published2011-08-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P
Description
libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.
Weakness classification
- CWE-20: Improper Input Validation