What is CVE-2013-5003?

CVE-2013-5003 is a vulnerability in Phpmyadmin, classified under SQL Injection. Published 2013-07-31.

Is CVE-2013-5003 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Phpmyadmin

CVE-2013-5003

Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via (1) the scale parameter to pmd_pdf.php or (2) the pdf_page_number parameter to schema_export.php.

Vulnerability class: SQL Injection

EPSS: 0.016 (73.4th percentile) — read the EPSS interpretation.

Affected products

Phpmyadmin — versions 3.5.0.0, 3.5.1.0, 3.5.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-5003?: CVE-2013-5003 is a vulnerability in Phpmyadmin, classified under SQL Injection. Published 2013-07-31.
Is CVE-2013-5003 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.