Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 2.11.11.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-0987
The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x prior to 2.11.11.3, and 3.3.x prior to 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL que...
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.11.2Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.3.8.1Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7
NA
CVE-2011-0986
phpMyAdmin 2.11.x prior to 2.11.11.2, and 3.3.x prior to 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote malicious users to obtain the installation path via a direct request for a nonexistent file.
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.3.8.1Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7Phpmyadmin Phpmyadmin 2.11.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook