CVE-2011-4107
The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 12.7%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 12.67% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-611
- Affected
- phpmyadmin/phpmyadmin · fedoraproject/fedora · debian/debian linux
- Source
- secalert@redhat.com
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069625.htmlMailing List, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069635.htmlMailing List, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069649.htmlMailing List, Third Party Advisory
- http://osvdb.org/76798Broken Link
- http://packetstormsecurity.org/files/view/106511/phpmyadmin-fileread.txtBroken Link, Exploit
- http://seclists.org/fulldisclosure/2011/Nov/21Exploit, Mailing List, Third Party Advisory
- http://secunia.com/advisories/46447Broken Link, Vendor Advisory
- http://securityreason.com/securityalert/8533Broken Link
- http://www.debian.org/security/2012/dsa-2391Mailing List
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:198Broken Link
- http://www.openwall.com/lists/oss-security/2011/11/03/3Mailing List
- http://www.openwall.com/lists/oss-security/2011/11/03/5Mailing List
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-17.phpPatch, Vendor Advisory
- http://www.securityfocus.com/bid/50497Broken Link, Third Party Advisory, VDB Entry
- http://www.wooyun.org/bugs/wooyun-2010-03185Broken Link, Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=751112Exploit, Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71108Third Party Advisory, VDB Entry
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069625.htmlMailing List, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069635.htmlMailing List, Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069649.htmlMailing List, Third Party Advisory
- http://osvdb.org/76798Broken Link
- http://packetstormsecurity.org/files/view/106511/phpmyadmin-fileread.txtBroken Link, Exploit
- http://seclists.org/fulldisclosure/2011/Nov/21Exploit, Mailing List, Third Party Advisory
- http://secunia.com/advisories/46447Broken Link, Vendor Advisory
- http://securityreason.com/securityalert/8533Broken Link
- http://www.debian.org/security/2012/dsa-2391Mailing List
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:198Broken Link
- http://www.openwall.com/lists/oss-security/2011/11/03/3Mailing List
- http://www.openwall.com/lists/oss-security/2011/11/03/5Mailing List
- http://www.phpmyadmin.net/home_page/security/PMASA-2011-17.phpPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.