• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

phpMyAdmin Upgrade: Security Flaw

E

Eric Pretorious

Regular Pleskian
  1. At the bottom of the phpMyAdmin homepage there's a warning:

    A newer version of phpMyAdmin is available and you should consider upgrading. The newest version is 4.0.0, released on 2013-05-03.
    Click to expand...
  2. In Volume 13, Number 19 of the @RISK: The Consensus Security Vulnerability Alert, SANS has issued an alert...

    ID: CVE-2013-3238
    Title: phpMyAdmin preg_replace() Input Validation Error Script
    Execution Vulnerability
    Vendor: phpMyAdmin
    Description: phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.
    CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:p/I:p/A:p)
    Click to expand...
From the most recent rpt_cl_report_for_admin__:

Parallels Panel version psa v11.0.9_build110120608.16 os_CentOS 6
Click to expand...

Has the Plesk community already been notified of this vulnerability? Has this vulnerability already been addressed? How/When will phpMyAdmin be upgraded?
 
Last edited:
You must log in or register to reply here.

Similar threads

A
Parallels Plesk Pannel 11.0.9 Horde webmail vulnerability?
Replies
4
Views
4K
_Alberto_
A
A
Email recieved: Important information regarding your server
Replies
0
Views
2K
AndyPovey
A
D
PCI Compliance Issues
Replies
2
Views
3K
Jllynch
Jllynch
D
How do I turn off TRACK and TRACE HTTP please.
Replies
2
Views
6K
Dave-Brown
D
R
Control Panel PHP
Replies
2
Views
4K
rank1st
R
Back
Top