CVE-2008-3197

Published Jul 16, 2008 CVSS 2.0 · 3.5 Low EPSS < 1% KEV · Not listed
Description
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1641-1 New phpmyadmin packages fix several issues
EUVD EUVD EUVD-2008-3187 Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 9:28 AM
Reserved
Jul 16, 2008, 12:00 AM
Status
Modified
Published
Jul 16, 2008, 6:41 PM
Modified
Jun 16, 2026, 10:55 PM