Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 2.11.7 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-5621
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x prior to 2.11.9.4 and 3.x prior to 3.1.1.0 allows remote malicious users to perform unauthorized actions as the administrator via a link or IMG tag to tbl_structure.php with a modified table parameter. NOTE: oth...
Phpmyadmin Phpmyadmin 2.11.1.0Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.4.0Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.7Phpmyadmin Phpmyadmin 3.1.0.0Phpmyadmin Phpmyadmin 3.0.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.0.0Phpmyadmin Phpmyadmin 2.11.1
NA
CVE-2009-1151
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x prior to 2.11.9.5 and 3.x prior to 3.1.3.1 allows remote malicious users to inject arbitrary PHP code into a configuration file via the save action.
Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.6Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 3.1.1Phpmyadmin Phpmyadmin 2.11.9Phpmyadmin Phpmyadmin 2.11.8Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.5
NA
CVE-2009-1150
Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x prior to 2.11.9.5 and 3.x prior to 3.1.3.1 allow remote malicious users to inject arbitrary web script or HTML via the pma_db_filename_template cookie.
Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 3.1.1Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.6Phpmyadmin Phpmyadmin 2.11.5Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.1.0Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.9Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.4
NA
CVE-2008-7251
libraries/File.class.php in phpMyAdmin 2.11.x prior to 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.
Phpmyadmin Phpmyadmin 2.11.0rc1Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.6rc1Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.1.0Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.9.6Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.0beta1Phpmyadmin Phpmyadmin 2.11.5rc1Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.0.0Phpmyadmin Phpmyadmin 2.11.8Phpmyadmin Phpmyadmin 2.11.7
NA
CVE-2008-7252
libraries/File.class.php in phpMyAdmin 2.11.x prior to 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Phpmyadmin Phpmyadmin 2.11.3rc1Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.9Phpmyadmin Phpmyadmin 2.11.0beta1Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.0.0Phpmyadmin Phpmyadmin 2.11.9.5Phpmyadmin Phpmyadmin 2.11.7Phpmyadmin Phpmyadmin 2.11.1rc1Phpmyadmin Phpmyadmin 2.11.0rc1Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.6Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.11.9.4
NA
CVE-2008-4096
libraries/database_interface.lib.php in phpMyAdmin prior to 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 2.1.2Phpmyadmin Phpmyadmin 2.10.3Phpmyadmin Phpmyadmin 2.10.01Phpmyadmin Phpmyadmin 2.10.2Phpmyadmin Phpmyadmin 2.10.1Phpmyadmin Phpmyadmin 2.0.2Phpmyadmin Phpmyadmin 2.0.3Phpmyadmin Phpmyadmin 2.10.0.0Phpmyadmin Phpmyadmin 2.10.2.0Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.1rc1Phpmyadmin Phpmyadmin 2.1.1Phpmyadmin Phpmyadmin 2.10.3rc1Phpmyadmin Phpmyadmin 2.10.1.0Phpmyadmin Phpmyadmin 2.11.5rc1Phpmyadmin Phpmyadmin 2.11.4rc1Phpmyadmin Phpmyadmin 2.0.0Phpmyadmin Phpmyadmin 2.0.1
NA
CVE-2009-3697
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x prior to 2.11.9.6 and 3.x prior to 3.2.2.1 allows remote malicious users to execute arbitrary SQL commands via unspecified interface parameters.
Phpmyadmin Phpmyadmin 2.11.0beta1Phpmyadmin Phpmyadmin 2.11.0.0Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.5Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.6Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 3.1.1Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.7Phpmyadmin Phpmyadmin 2.11.9Phpmyadmin Phpmyadmin 3.0.0-alphaPhpmyadmin Phpmyadmin 3.0.0-betaPhpmyadmin Phpmyadmin 3.1.3.1Phpmyadmin Phpmyadmin 3.1.3.2
NA
CVE-2009-3696
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x prior to 2.11.9.6 and 3.x prior to 3.2.2.1 allows remote malicious users to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 3.0.1Phpmyadmin Phpmyadmin 3.1.0.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 3.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 3.2.2Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.1.0Phpmyadmin Phpmyadmin 2.11.0.0Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.5.2
NA
CVE-2008-2960
Cross-site scripting (XSS) vulnerability in phpMyAdmin prior to 2.11.7, when register_globals is enabled and .htaccess support is disabled, allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors involving scripts in libraries/.
Phpmyadmin Phpmyadmin 2.10.0Phpmyadmin Phpmyadmin 2.10.0.1Phpmyadmin Phpmyadmin 2.11.0rc1Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.3rc1Phpmyadmin Phpmyadmin 2.11.6Phpmyadmin Phpmyadmin 2.11.6rc1Phpmyadmin Phpmyadmin 2.10.3Phpmyadmin Phpmyadmin 2.10.3rc1Phpmyadmin Phpmyadmin 2.11.1rc1Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.5Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.10.0.2Phpmyadmin Phpmyadmin 2.10.1Phpmyadmin Phpmyadmin 2.10.2Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.4rc1Phpmyadmin Phpmyadmin 2.11.0
NA
CVE-2008-4326
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin prior to 2.11.9.2, when Internet Explorer is used, allows remote malicious users to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</scri...
Phpmyadmin Phpmyadmin 2.0.3Phpmyadmin Phpmyadmin 2.0.0Phpmyadmin Phpmyadmin 2.10.0Phpmyadmin Phpmyadmin 2.10.1Phpmyadmin Phpmyadmin 2.10.1.0Phpmyadmin Phpmyadmin 2.11.1.0Phpmyadmin Phpmyadmin 2.11.0beta1Phpmyadmin Phpmyadmin 2.11.0.0Phpmyadmin Phpmyadmin 2.11.1rc1Phpmyadmin Phpmyadmin 2.11.3rc1Phpmyadmin Phpmyadmin 2.11.5rc1Phpmyadmin Phpmyadmin 2.11.4rc1Phpmyadmin Phpmyadmin 2.11.8Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.2 Rc1Phpmyadmin Phpmyadmin 2.2 Pre2Phpmyadmin Phpmyadmin 2.2 Pre1Phpmyadmin Phpmyadmin 2.2.7 Pl1Phpmyadmin Phpmyadmin 2.5.1Phpmyadmin Phpmyadmin 2.5.2Phpmyadmin Phpmyadmin 2.5.5 Rc2Phpmyadmin Phpmyadmin 2.5.5 Rc1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook