Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 3.4.2.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-2718
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x prior to 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) librar...
Phpmyadmin Phpmyadmin 3.4.0.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.3.0
NA
CVE-2011-2643
Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x prior to 3.4.3.2, when configuration storage is enabled, allows remote malicious users to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter.
Phpmyadmin Phpmyadmin 3.4.0.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.3.0
NA
CVE-2011-3592
Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x prior to 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a (1) database name, (2) table name, or (3) column name that is not ...
Phpmyadmin Phpmyadmin 3.4.3.0Phpmyadmin Phpmyadmin 3.4.3.2Phpmyadmin Phpmyadmin 3.4.0.0Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.4.0
NA
CVE-2011-3591
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x prior to 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, ...
Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.4.0Phpmyadmin Phpmyadmin 3.4.0.0Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.3.0Phpmyadmin Phpmyadmin 3.4.3.2
NA
CVE-2011-4064
Cross-site scripting (XSS) vulnerability in the setup interface in phpMyAdmin 3.4.x prior to 3.4.6 allows remote malicious users to inject arbitrary web script or HTML via a crafted value.
Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.4.0Phpmyadmin Phpmyadmin 3.4.3.0Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.5.0Phpmyadmin Phpmyadmin 3.4.3.2Phpmyadmin Phpmyadmin 3.4.0.0
NA
CVE-2011-3646
phpmyadmin.css.php in phpMyAdmin 3.4.x prior to 3.4.6 allows remote malicious users to obtain sensitive information via an array-typed js_frame parameter to phpmyadmin.css.php, which reveals the installation path in an error message.
Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.3.2Phpmyadmin Phpmyadmin 3.4.4.0Phpmyadmin Phpmyadmin 3.4.5.0Phpmyadmin Phpmyadmin 3.4.3.0Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.0.0
NA
CVE-2011-4634
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x prior to 3.4.8 allow remote malicious users to inject arbitrary web script or HTML via (1) a crafted database name, related to the Database Synchronize panel; (2) a crafted database name, related to the Datab...
Phpmyadmin Phpmyadmin 3.4.5.0Phpmyadmin Phpmyadmin 3.4.0.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.6.0Phpmyadmin Phpmyadmin 3.4.4.0Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.3.0Phpmyadmin Phpmyadmin 3.4.7.0Phpmyadmin Phpmyadmin 3.4.3.2
NA
CVE-2011-4780
Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x prior to 3.4.9 allow remote malicious users to inject arbitrary web script or HTML via crafted URL parameters, related to the export panels in the (1) server, (2) database,...
Phpmyadmin Phpmyadmin 3.4.5.0Phpmyadmin Phpmyadmin 3.4.0.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.6.0Phpmyadmin Phpmyadmin 3.4.4.0Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.8.0Phpmyadmin Phpmyadmin 3.4.3.0Phpmyadmin Phpmyadmin 3.4.7.0Phpmyadmin Phpmyadmin 3.4.3.2
NA
CVE-2011-4782
Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x prior to 3.4.9 allows remote malicious users to inject arbitrary web script or HTML via the host parameter.
Phpmyadmin Phpmyadmin 3.4.5.0Phpmyadmin Phpmyadmin 3.4.0.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.6.0Phpmyadmin Phpmyadmin 3.4.4.0Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.8.0Phpmyadmin Phpmyadmin 3.4.3.0Phpmyadmin Phpmyadmin 3.4.7.0Phpmyadmin Phpmyadmin 3.4.3.2
NA
CVE-2012-1190
Cross-site scripting (XSS) vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x prior to 3.4.10.1 allows user-assisted remote malicious users to inject arbitrary web script or HTML via a crafted database name.
Phpmyadmin Phpmyadmin 3.4.3.0Phpmyadmin Phpmyadmin 3.4.3.1Phpmyadmin Phpmyadmin 3.4.3.2Phpmyadmin Phpmyadmin 3.4.8.0Phpmyadmin Phpmyadmin 3.4.9.0Phpmyadmin Phpmyadmin 3.4.4.0Phpmyadmin Phpmyadmin 3.4.5.0Phpmyadmin Phpmyadmin 3.4.10.0Phpmyadmin Phpmyadmin 3.4.2.0Phpmyadmin Phpmyadmin 3.4.7.0Phpmyadmin Phpmyadmin 3.4.7.1Phpmyadmin Phpmyadmin 3.4.0.0Phpmyadmin Phpmyadmin 3.4.1.0Phpmyadmin Phpmyadmin 3.4.6.0Phpmyadmin Phpmyadmin 3.4.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook