Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 2.11.10.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-3055
The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x prior to 2.11.10.1 does not properly restrict key names in its output file, which allows remote malicious users to execute arbitrary PHP code via a crafted POST request.
Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 2.11.4.0Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.9.5Phpmyadmin Phpmyadmin 2.11.10.0Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.9.6Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.7.1Phpmyadmin Phpmyadmin 2.11.3.0
NA
CVE-2010-3056
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x prior to 2.11.10.1 and 3.x prior to 3.3.5.1 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) db_search.php, (2) db_sql.php, (3) db_structure.php, (4) js/messages...
Phpmyadmin Phpmyadmin 2.11.10.0Phpmyadmin Phpmyadmin 2.11.9.5Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.9.6Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.7.1Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.5.1
NA
CVE-2010-4329
Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x prior to 2.11.11.1 and 3.x prior to 3.3.8.1 allows remote malicious users to inject arbitrary web script or HTML via a cra...
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7Phpmyadmin Phpmyadmin 2.11.11Phpmyadmin Phpmyadmin 2.11.4.0
NA
CVE-2011-0987
The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x prior to 2.11.11.3, and 3.3.x prior to 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL que...
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.11.2Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.3.8.1Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7
NA
CVE-2011-0986
phpMyAdmin 2.11.x prior to 2.11.11.2, and 3.3.x prior to 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote malicious users to obtain the installation path via a direct request for a nonexistent file.
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.3.8.1Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7Phpmyadmin Phpmyadmin 2.11.11
NA
CVE-2010-4481
phpMyAdmin prior to 3.4.0-beta1 allows remote malicious users to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.3.8.1Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7
NA
CVE-2011-2642
Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin prior to 3.3.10.3 and 3.4.x prior to 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name.
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 3.3.10.0Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.3.8.1Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.3.10.1Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 3.3.9.2Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0
NA
CVE-2007-6100
Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin prior to 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote malicious users to inject arbitrary web script or HTML via the convcharset parameter to index.php...
Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.4.0Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.10.3Phpmyadmin Phpmyadmin 2.10.1.0Phpmyadmin Phpmyadmin 2.9.0.1Phpmyadmin Phpmyadmin 2.9.0.2Phpmyadmin Phpmyadmin 2.8.0.2Phpmyadmin Phpmyadmin 2.8.0.3Phpmyadmin Phpmyadmin 2.6.2Phpmyadmin Phpmyadmin 2.11.10.1Phpmyadmin Phpmyadmin 2.11.10.0Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.5.1
NA
CVE-2014-1879
Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin prior to 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.
Phpmyadmin Phpmyadmin 4.0.6Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.1.0Phpmyadmin Phpmyadmin 1.0.6Phpmyadmin Phpmyadmin 1.0.7Phpmyadmin Phpmyadmin 1.0.8Phpmyadmin Phpmyadmin 1.2.9.3Phpmyadmin Phpmyadmin 1.2.9.4Phpmyadmin Phpmyadmin 1.2.9.5Phpmyadmin Phpmyadmin 2.11.4.0Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.0.1Phpmyadmin Phpmyadmin 3.1.5Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.3.6Phpmyadmin Phpmyadmin 3.3.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook