CVE-2007-1325

published 2007-03-07

CVE-2007-1325: The PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion on arrays provided by users, which…

Priority P4 21 high 7.1 CVSS 2.0

AV N AC M Au N C N I N A C

The PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion on arrays provided by users, which allows context-dependent attackers to cause a denial of service (web server crash) via an array with many dimensions. NOTE: it could be argued that this vulnerability is caused by a problem in PHP (CVE-2006-1549) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in phpMyAdmin.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	phpmyadmin	< phpmyadmin 4:2.10.0.2-1 (bookworm)	phpmyadmin 4:2.10.0.2-1 (bookworm)
phpmyadmin	phpmyadmin	<= 2.10.0.1	—
phpmyadmin	phpmyadmin	>= 0 < 4:2.10.0.2-1	4:2.10.0.2-1
phpmyadmin	phpmyadmin	>= 0 < 4:2.10.0.2-1	4:2.10.0.2-1
phpmyadmin	phpmyadmin	>= 0 < 4:2.10.0.2-1	4:2.10.0.2-1
phpmyadmin	phpmyadmin	>= 0 < 4:2.10.0.2-1	4:2.10.0.2-1

CVSS provenance

nvd v2.0 7.1 HIGH AV:N/AC:M/Au:N/C:N/I:N/A:C

osv 2.1 LOW

vendor_debian 2.1 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.