CVE-2013-3238
Last modified
CVE-2013-3238 is a vulnerability of currently unknown severity. phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.. EPSS estimates a 28.85% chance of exploitation in the next 30 days.
Description
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace function call within the "Replace table prefix" feature.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Phpmyadmin | Phpmyadmin | 3.5.0.0 | — |
| Phpmyadmin | Phpmyadmin | 3.5.1.0 | — |
| Phpmyadmin | Phpmyadmin | 3.5.2.0 | — |
| Phpmyadmin | Phpmyadmin | 3.5.2.1 | — |
| Phpmyadmin | Phpmyadmin | 3.5.2.2 | — |
| Phpmyadmin | Phpmyadmin | 3.5.3.0 | — |
| Phpmyadmin | Phpmyadmin | 3.5.4 | — |
| Phpmyadmin | Phpmyadmin | 3.5.5 | — |
| Phpmyadmin | Phpmyadmin | 3.5.6 | — |
| Phpmyadmin | Phpmyadmin | 3.5.7 | — |
| Phpmyadmin | Phpmyadmin | 3.5.8 | Rc1 |
| Phpmyadmin | Phpmyadmin | 4.0.0 | Rc2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3238?
How severe is CVE-2013-3238?
How do I fix CVE-2013-3238?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-3232The nr_recvmsg function in net/netrom/af_netrom.c in the Lin…
- CVE-2013-3233The llcp_sock_recvmsg function in net/nfc/llcp/sock.c in the…
- CVE-2013-3234The rose_recvmsg function in net/rose/af_rose.c in the Linux…
- CVE-2013-3235net/tipc/socket.c in the Linux kernel before 3.9-rc7 does no…
- CVE-2013-3236The vmci_transport_dgram_dequeue function in net/vmw_vsock/v…
- CVE-2013-3237The vsock_stream_sendmsg function in net/vmw_vsock/af_vsock.…
- CVE-2013-3239phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when…
- CVE-2013-3240Directory traversal vulnerability in the Export feature in p…
- CVE-2013-3241export.php (aka the export script) in phpMyAdmin 4.x before …
- CVE-2013-3242plugins/system/remember/remember.php in Joomla! 2.5.x before…
- CVE-2013-3243Unspecified vulnerability in OpenText/IXOS ECM for SAP NetWe…
- CVE-2013-3244Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY…
Are you affected by CVE-2013-3238?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST