名称： phpMyAdmin Arbitrary Command Execution Vulnerability 影响系统： phpMyAdmin phpMyAdmin 2.2rc3 phpMyAdmin phpMyAdmin 2.2rc2 phpMyAdmin phpMyAdmin 2.2rc1 phpMyAdmin phpMyAdmin 2.2pre1 phpMyAdmin phpMyAdmin 2.1.2 phpMyAdmin phpMyAdmin 2.1.1 phpMyAdmin phpMyAdmin 2.1 phpMyAdmin phpMyAdmin 2.0.5 phpMyAdmin phpMyAdmin 2.0.4 phpMyAdmin phpMyAdmin 2.0.3 phpMyAdmin phpMyAdmin 2.0.2 phpMyAdmin phpMyAdmin 2.0.1 phpMyAdmin phpMyAdmin 2.0 - Sun Solaris 8.0_x86 - Sun Solaris 8.0 - Sun Solaris 7.0_x86 - Sun Solaris 7.0 - Sun Solaris 2.6_x86 - Sun Solaris 2.6 - S.u.S.E. Linux 7.1 - S.u.S.E. Linux 7.0 - S.u.S.E. Linux 6.4 - RedHat Linux 7.0 - RedHat Linux 6.2 - OpenBSD OpenBSD 2.8 - OpenBSD OpenBSD 2.7 - OpenBSD OpenBSD 2.6 - MandrakeSoft Linux Mandrake 7.2 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.0 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 3.5.1 - Debian Linux 2.2 sparc - Debian Linux 2.2 powerpc - Debian Linux 2.2 arm - Debian Linux 2.2 alpha - Debian Linux 2.2 68k - Debian Linux 2.2 描述： phpMyAdmin是一款管理 MySQL 数据库的 PHP 工具，具有基于 WEB 的界面。 phpMyAdmin中存在一个输入验证错误，允许远程攻击者执行任意命令。攻击者可能获取敏感信息或者以httpd运行身份执行任意命令。 问题出在 \`tbl_copy.php\` 和 \`tbl_rename.php\` 两段代码中： tbl_copy.php: eval(\"\\$message = \\\"$strCopyTableOK\\\";\"); tbl_rename.php: eval(\"\\$message = \\\"$strRenameTableOK\\\";\");