CVE-2011-4107

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 13%

from disclosure to weapon58 days

Published on NVDNov 17

1st PoC+58d

exploitation probability

13%top 4% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

Affected products

n/a · n/a

public PoCs found — 3

githubgithub.com/SECFORCE/CVE-2011-4107★ 4 cve_referencepacketstormsecurity.org/files/view/106511/phpmyadmin-fileread.txtunverified exploitdbwww.exploit-db.com/exploits/18371unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069625.html http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069635.html http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069649.html http://osvdb.org/76798 http://packetstormsecurity.org/files/view/106511/phpmyadmin-fileread.txt https://bugzilla.redhat.com/show_bug.cgi?id=751112 http://seclists.org/fulldisclosure/2011/Nov/21 http://secunia.com/advisories/46447 http://securityreason.com/securityalert/8533 https://exchange.xforce.ibmcloud.com/vulnerabilities/71108 http://www.debian.org/security/2012/dsa-2391 http://www.mandriva.com/security/advisories?name=MDVSA-2011:198