import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to
    specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array,
    and consequently change the configuration, via a crafted request. (CVE-2013-4729)

According to its self-identified version number, the phpMyAdmin 4.x install hosted on the remote web server is earlier than 4.0.4.1 and, therefore, contains a flaw where the 'import.php' script does not properly sanitize input.  This could allow attackers to inject arbitrary GLOBALS variables and thereby manipulate any configuration parameter.

Versions of phpMyAdmin 4.0.0 through 4.0.4 are potentially affected by a remote security vulnerability that lets attackers inject arbitrary GLOBALS variable. The issue occurs because the application fails to properly sanitize user-supplied input submitted to the 'import.php' script. Attackers can exploit this issue to inject arbitrary GLOBALS variables and manipulate any configuration parameters.

The phpMyAdmin development team reports :

The import.php script was vulnerable to GLOBALS variable injection.
Therefore, an attacker could manipulate any configuration parameter.

This vulnerability can be triggered only by someone who logged in to phpMyAdmin, as the usual token protection prevents non-logged-in users from accessing the required form.

ID	Name	Product	Family	Type	Severity
433041	SCA: security update for phpmyadmin/phpmyadmin (GHSA-x962-w72p-mv7q)	Tenable Cloud Security	SCA Checks	Local	medium
433041	SCA: security update for phpmyadmin/phpmyadmin (GHSA-x962-w72p-mv7q)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
67228	phpMyAdmin 4.x < 4.0.4.1 import.php GLOBALS Variable Injection Configuration Parameter Manipulation (PMASA-2013-7)	Nessus	CGI abuses	Remote	medium
6917	phpMyAdmin 4.0.x < 4.0.4.1 'import.php' Security Vulnerability	Nessus Network Monitor	CGI		medium
67117	FreeBSD : phpMyAdmin -- Global variable scope injection (1b93f6fe-e1c1-11e2-948d-6805ca0b3d42)	Nessus	FreeBSD Local Security Checks	Local	medium

Detections

Analytics

CVE-2013-4729

medium

Tenable Plugins

medium

medium

medium

medium

medium