CVE ID:	CVE-2011-2719
Description:	libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505.
Test IDs:	1.3.6.1.4.1.25623.1.0.70052   1.3.6.1.4.1.25623.1.0.70053
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2719 20110724 phpMyAdmin 3.x Conditional Session Manipulation http://seclists.org/fulldisclosure/2011/Jul/300 20110724 phpMyAdmin 3.x Conditional Session Manipulation http://www.securityfocus.com/archive/1/518967/100/0/threaded 20110804 Re: [Full-disclosure] phpMyAdmin 3.x Conditional Session Manipulation http://www.securityfocus.com/archive/1/519155/100/0/threaded 45315 http://secunia.com/advisories/45315 45365 http://secunia.com/advisories/45365 45515 http://secunia.com/advisories/45515 48874 http://www.securityfocus.com/bid/48874 74112 http://osvdb.org/74112 8322 http://securityreason.com/securityalert/8322 DSA-2286 http://www.debian.org/security/2011/dsa-2286 FEDORA-2011-9725 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html FEDORA-2011-9734 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063418.html MDVSA-2011:124 http://www.mandriva.com/security/advisories?name=MDVSA-2011:124 [oss-security] 20110725 CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12 http://www.openwall.com/lists/oss-security/2011/07/25/4 [oss-security] 20110726 Re: CVE-Request -- phpMyAdmin -- PMASA-2011-11 and PMASA-2011-12 http://www.openwall.com/lists/oss-security/2011/07/26/10 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=571cdc6ff4bf375871b594f4e06f8ad3159d1754 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=571cdc6ff4bf375871b594f4e06f8ad3159d1754 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7 http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php http://www.phpmyadmin.net/home_page/security/PMASA-2011-12.php http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt http://www.xxor.se/advisories/phpMyAdmin_3.x_Conditional_Session_Manipulation.txt https://bugzilla.redhat.com/show_bug.cgi?id=725384 https://bugzilla.redhat.com/show_bug.cgi?id=725384 phpmyadmin-swekey-file-overwrite(68769) https://exchange.xforce.ibmcloud.com/vulnerabilities/68769