Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 2.11.9.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-4605
scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x prior to 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote malicious users to conduct cross-site request forgery (CSRF) attacks via unspecif...
Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.1.0Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 2.11.4.0Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.9.6Phpmyadmin Phpmyadmin 2.11.9.5Phpmyadmin Phpmyadmin 2.11.7.1Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.2.1
NA
CVE-2010-3055
The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x prior to 2.11.10.1 does not properly restrict key names in its output file, which allows remote malicious users to execute arbitrary PHP code via a crafted POST request.
Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 2.11.4.0Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.9.5Phpmyadmin Phpmyadmin 2.11.10.0Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.9.6Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.7.1Phpmyadmin Phpmyadmin 2.11.3.0
NA
CVE-2009-1151
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x prior to 2.11.9.5 and 3.x prior to 3.1.3.1 allows remote malicious users to inject arbitrary PHP code into a configuration file via the save action.
Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.6Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 3.1.1Phpmyadmin Phpmyadmin 2.11.9Phpmyadmin Phpmyadmin 2.11.8Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.5
NA
CVE-2009-1150
Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x prior to 2.11.9.5 and 3.x prior to 3.1.3.1 allow remote malicious users to inject arbitrary web script or HTML via the pma_db_filename_template cookie.
Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 3.1.1Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.6Phpmyadmin Phpmyadmin 2.11.5Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.1.0Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.9Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.4
NA
CVE-2008-7251
libraries/File.class.php in phpMyAdmin 2.11.x prior to 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.
Phpmyadmin Phpmyadmin 2.11.0rc1Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.6rc1Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.1.0Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.9.6Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.0beta1Phpmyadmin Phpmyadmin 2.11.5rc1Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.0.0Phpmyadmin Phpmyadmin 2.11.8Phpmyadmin Phpmyadmin 2.11.7
NA
CVE-2008-7252
libraries/File.class.php in phpMyAdmin 2.11.x prior to 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Phpmyadmin Phpmyadmin 2.11.3rc1Phpmyadmin Phpmyadmin 2.11.3Phpmyadmin Phpmyadmin 2.11.9Phpmyadmin Phpmyadmin 2.11.0beta1Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.11.0.0Phpmyadmin Phpmyadmin 2.11.9.5Phpmyadmin Phpmyadmin 2.11.7Phpmyadmin Phpmyadmin 2.11.1rc1Phpmyadmin Phpmyadmin 2.11.0rc1Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.6Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.11.9.4
NA
CVE-2010-3056
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x prior to 2.11.10.1 and 3.x prior to 3.3.5.1 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) db_search.php, (2) db_sql.php, (3) db_structure.php, (4) js/messages...
Phpmyadmin Phpmyadmin 2.11.10.0Phpmyadmin Phpmyadmin 2.11.9.5Phpmyadmin Phpmyadmin 2.11.9.4Phpmyadmin Phpmyadmin 2.11.9.3Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.2.1Phpmyadmin Phpmyadmin 2.11.2.0Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.11.9.6Phpmyadmin Phpmyadmin 2.11.9.2Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 2.11.3.0Phpmyadmin Phpmyadmin 2.11.1.1Phpmyadmin Phpmyadmin 2.11.0Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 2.11.7.0Phpmyadmin Phpmyadmin 2.11.7.1Phpmyadmin Phpmyadmin 2.11.6.0Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 2.11.5.1
NA
CVE-2010-4329
Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x prior to 2.11.11.1 and 3.x prior to 3.3.8.1 allows remote malicious users to inject arbitrary web script or HTML via a cra...
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7Phpmyadmin Phpmyadmin 2.11.11Phpmyadmin Phpmyadmin 2.11.4.0
NA
CVE-2011-0987
The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x prior to 2.11.11.3, and 3.3.x prior to 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL que...
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.11.2Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.3.8.1Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7
NA
CVE-2011-0986
phpMyAdmin 2.11.x prior to 2.11.11.2, and 3.3.x prior to 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote malicious users to obtain the installation path via a direct request for a nonexistent file.
Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 3.2.1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.11.5.0Phpmyadmin Phpmyadmin 3.3.8.1Phpmyadmin Phpmyadmin 3.2.0Phpmyadmin Phpmyadmin 3.1.2Phpmyadmin Phpmyadmin 2.11.9.0Phpmyadmin Phpmyadmin 3.1.0Phpmyadmin Phpmyadmin 2.11.9.1Phpmyadmin Phpmyadmin 3.3.3.0Phpmyadmin Phpmyadmin 3.0.0Phpmyadmin Phpmyadmin 3.3.4.0Phpmyadmin Phpmyadmin 2.11.5.2Phpmyadmin Phpmyadmin 2.11.2.2Phpmyadmin Phpmyadmin 2.11.8.0Phpmyadmin Phpmyadmin 3.3.1.0Phpmyadmin Phpmyadmin 3.3.7Phpmyadmin Phpmyadmin 2.11.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook