phpmyadmin phpmyadmin 2.11.9 vulnerabilities and exploits

(subscribe to this query)

Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x prior to 2.11.9.5 and 3.x prior to 3.1.3.1 allows remote malicious users to inject arbitrary PHP code into a configuration file via the save action.

3 EDB exploits2 Github repositories

Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x prior to 2.11.9.5 and 3.x prior to 3.1.3.1 allow remote malicious users to inject arbitrary web script or HTML via the pma_db_filename_template cookie.

SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x prior to 2.11.9.6 and 3.x prior to 3.2.2.1 allows remote malicious users to execute arbitrary SQL commands via unspecified interface parameters.

Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x prior to 2.11.9.6 and 3.x prior to 3.2.2.1 allows remote malicious users to inject arbitrary web script or HTML via a crafted name for a MySQL table.

The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin prior to 2.11.9.2, when Internet Explorer is used, allows remote malicious users to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</scri...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook