Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2013-3238 Details

Description

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://archives.neohapsis.com/archives/bugtraq/2013-04/0217.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104725.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104770.html	CVE
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104936.html	CVE
http://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html	CVE
https://github.com/phpmyadmin/phpmyadmin/commit/dedd542cdaf1606ca9aa3f6f8f8adb078d8ad549	CVE
https://github.com/phpmyadmin/phpmyadmin/commit/ffa720d90a79c1f33cf4c5a33403d09a67b42a66	CVE
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0133	CVE
http://www.exploit-db.com/exploits/25136	CVE
http://www.mandriva.com/security/advisories?name=MDVSA-2013:160	CVE
http://www.phpmyadmin.net/home_page/security/PMASA-2013-2.php	CVE
http://archives.neohapsis.com/archives/bugtraq/2013-04/0217.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104725.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104770.html	[email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104936.html	[email protected]
http://lists.opensuse.org/opensuse-updates/2013-06/msg00181.html	[email protected]
https://github.com/phpmyadmin/phpmyadmin/commit/dedd542cdaf1606ca9aa3f6f8f8adb078d8ad549	[email protected]
https://github.com/phpmyadmin/phpmyadmin/commit/ffa720d90a79c1f33cf4c5a33403d09a67b42a66	[email protected]
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0133	[email protected]
http://www.exploit-db.com/exploits/25136	[email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2013:160	[email protected]
http://www.phpmyadmin.net/home_page/security/PMASA-2013-2.php	[email protected]

see all 22 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
phpmyadmin phpmyadmin	3.5.0.0 3.5.1.0 3.5.2.0 3.5.2.1 3.5.2.2
CPE cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.0.0:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.1.0:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.0:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.1:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.2:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.3.0:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.4:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.5:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.6:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.7:::::::* cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.7:rc1:::::: cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.8:rc1:::::: cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:::::: Remediation No remediation found in references.

Product

Versions

phpmyadmin phpmyadmin

3.5.0.0

3.5.1.0

3.5.2.0

3.5.2.1

3.5.2.2

CPE

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.2.2:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.4:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.5:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.6:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.7:*:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.7:rc1:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.8:rc1:*:*:*:*:*:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:rc2:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Apr 26, 2013	Initial Analysis	[email protected]