phpmyadmin phpmyadmin 2.11.6 vulnerabilities and exploits

(subscribe to this query)

NA

Cross-site scripting (XSS) vulnerability in phpMyAdmin prior to 2.11.7, when register_globals is enabled and .htaccess support is disabled, allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/.

NA

Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x prior to 2.11.9.5 and 3.x prior to 3.1.3.1 allows remote malicious users to inject arbitrary PHP code into a configuration file via the save action.

3 EDB exploits2 Github repositories

NA

Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x prior to 2.11.9.5 and 3.x prior to 3.1.3.1 allow remote malicious users to inject arbitrary web script or HTML via the pma_db_filename_template cookie.

NA

phpMyAdmin prior to 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote malicious users to conduct spoofing or phishing activities via a cross-site framing attack.

NA

Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin prior to 2.11.8 allows user-assisted remote malicious users to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker mu...

NA

libraries/database_interface.lib.php in phpMyAdmin prior to 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.

1 EDB exploit

NA

SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x prior to 2.11.9.6 and 3.x prior to 3.2.2.1 allows remote malicious users to execute arbitrary SQL commands via unspecified interface parameters.

NA

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x prior to 2.11.9.6 and 3.x prior to 3.2.2.1 allows remote malicious users to inject arbitrary web script or HTML via a crafted name for a MySQL table.

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook