phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-02-02T05:00:00

Updated: 2024-08-08T04:44:07.019Z

Reserved: 2002-01-31T00:00:00

Link: CVE-2001-1060

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2001-07-31T04:00:00.000

Modified: 2009-04-03T04:00:00.000

Link: CVE-2001-1060

cve-icon Redhat

No data.