This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2009-1151 →

DEBIAN-CVE-2009-1151

Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitra...

Original description

The description as published by the source.

Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:3.1.3.1-1"}]}]

Debian:13 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:3.1.3.1-1"}]}]

Debian:14 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:3.1.3.1-1"}]}]

References

advisory security-tracker.debian.org