Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 2.9.0 beta1 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2006-6943

PhpMyAdmin prior to 2.9.1.1 allows remote malicious users to obtain the full server path via direct requests to (a) scripts/check_lang.php and (b) themes/darkblue_orange/layout.inc.php; and via the (1) lang[], (2) target[], (3) db[], (4) goto[], (5) table[], and (6) tbl_group[] a...
Phpmyadmin Phpmyadmin 2.9.1 Rc2Phpmyadmin Phpmyadmin 2.9.0.1Phpmyadmin Phpmyadmin 2.9.0.2Phpmyadmin Phpmyadmin 2.9.0 Rc1Phpmyadmin Phpmyadmin 2.9.0Phpmyadmin Phpmyadmin 2.9.0.3Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.9.1 Rc1Phpmyadmin Phpmyadmin 2.9.0 Beta1
NA

CVE-2006-6944

phpMyAdmin prior to 2.9.1.1 allows remote malicious users to bypass Allow/Deny access rules that use IP addresses via false headers.
Phpmyadmin Phpmyadmin 2.9.1 Rc2Phpmyadmin Phpmyadmin 2.9.0.1Phpmyadmin Phpmyadmin 2.9.0.2Phpmyadmin Phpmyadmin 2.9.0 Rc1Phpmyadmin Phpmyadmin 2.9.0Phpmyadmin Phpmyadmin 2.9.0.3Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.9.1 Rc1Phpmyadmin Phpmyadmin 2.9.0 Beta1
NA

CVE-2006-6942

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin prior to 2.9.1.1 allow remote malicious users to inject arbitrary HTML or web script via (1) a comment for a table name, as exploited through (a) db_operations.php, (2) the db parameter to (b) db_create.php, (3) th...
Phpmyadmin Phpmyadmin 2.9.1 Rc2Phpmyadmin Phpmyadmin 2.9.0.1Phpmyadmin Phpmyadmin 2.9.0.2Phpmyadmin Phpmyadmin 2.9.0 Rc1Phpmyadmin Phpmyadmin 2.9.0Phpmyadmin Phpmyadmin 2.9.0.3Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.9.1 Rc1Phpmyadmin Phpmyadmin 2.9.0 Beta1Debian Debian Linux 3.1Debian Debian Linux 4.0
NA

CVE-2007-1395

Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 up to and including 2.9.2 allows remote malicious users to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase &l...
Phpmyadmin Phpmyadmin 2.8.1 DevPhpmyadmin Phpmyadmin 2.8.3Phpmyadmin Phpmyadmin 2.9.1.1Phpmyadmin Phpmyadmin 2.9.1 Rc2Phpmyadmin Phpmyadmin 2.8.0Phpmyadmin Phpmyadmin 2.9Phpmyadmin Phpmyadmin 2.8.0.2Phpmyadmin Phpmyadmin 2.8.2Phpmyadmin Phpmyadmin 2.9.0 DevPhpmyadmin Phpmyadmin 2.9.0.1Phpmyadmin Phpmyadmin 2.9.2Phpmyadmin Phpmyadmin 2.9.0.2Phpmyadmin Phpmyadmin 2.9.0 Rc1Phpmyadmin Phpmyadmin 2.9.1Phpmyadmin Phpmyadmin 2.9.0Phpmyadmin Phpmyadmin 2.9.0.3Phpmyadmin Phpmyadmin 2.8.0.1Phpmyadmin Phpmyadmin 2.9.1 Rc1Phpmyadmin Phpmyadmin 2.8.1Phpmyadmin Phpmyadmin 2.8.0.3Phpmyadmin Phpmyadmin 2.9.0 Beta1Phpmyadmin Phpmyadmin 2.8.4
NA

CVE-2009-2284

Cross-site scripting (XSS) vulnerability in phpMyAdmin prior to 3.2.0.1 allows remote malicious users to inject arbitrary web script or HTML via a crafted SQL bookmark.
Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.10.3rc1Phpmyadmin Phpmyadmin 3.0.1.1Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.1.1Phpmyadmin Phpmyadmin 2.11.0rc1Phpmyadmin Phpmyadmin 3.2.0-beta1Phpmyadmin Phpmyadmin 2.7.0Phpmyadmin Phpmyadmin 2.7.0 Pl1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.8.1 DevPhpmyadmin Phpmyadmin 2.6.4 Rc1Phpmyadmin Phpmyadmin 2.2.4Phpmyadmin Phpmyadmin 2.1.2Phpmyadmin Phpmyadmin 2.2.0 Rc2Phpmyadmin Phpmyadmin 2.2 Pre1Phpmyadmin Phpmyadmin 3.1.4Phpmyadmin Phpmyadmin 3.1.3Phpmyadmin Phpmyadmin 2.8.3Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.5.0
NA

CVE-2008-4326

The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin prior to 2.11.9.2, when Internet Explorer is used, allows remote malicious users to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</scri...
Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 2.0Phpmyadmin Phpmyadmin 2.0.0Phpmyadmin Phpmyadmin 2.0.1Phpmyadmin Phpmyadmin 2.0.2Phpmyadmin Phpmyadmin 2.0.3Phpmyadmin Phpmyadmin 2.0.4Phpmyadmin Phpmyadmin 2.0.5Phpmyadmin Phpmyadmin 2.1Phpmyadmin Phpmyadmin 2.1.0Phpmyadmin Phpmyadmin 2.1.1Phpmyadmin Phpmyadmin 2.1.2Phpmyadmin Phpmyadmin 2.2Phpmyadmin Phpmyadmin 2.2.0Phpmyadmin Phpmyadmin 2.2.0 Pre1Phpmyadmin Phpmyadmin 2.2.0 Pre2Phpmyadmin Phpmyadmin 2.2.0 Rc1Phpmyadmin Phpmyadmin 2.2.0 Rc2Phpmyadmin Phpmyadmin 2.2.0 Rc3Phpmyadmin Phpmyadmin 2.2.2Phpmyadmin Phpmyadmin 2.2.3Phpmyadmin Phpmyadmin 2.2.4
NA

CVE-2008-3197

Cross-site request forgery (CSRF) vulnerability in phpMyAdmin prior to 2.11.7.1 allows remote malicious users to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharse...
Phpmyadmin Phpmyadmin 2.5.2 Pl1Phpmyadmin Phpmyadmin 2.10.3rc1Phpmyadmin Phpmyadmin 2.11.4Phpmyadmin Phpmyadmin 2.1.1Phpmyadmin Phpmyadmin 2.11.0rc1Phpmyadmin Phpmyadmin 2.7.0Phpmyadmin Phpmyadmin 2.7.0 Pl1Phpmyadmin Phpmyadmin 2.11.1.2Phpmyadmin Phpmyadmin 2.8.1 DevPhpmyadmin Phpmyadmin 2.6.4 Rc1Phpmyadmin Phpmyadmin 2.2.4Phpmyadmin Phpmyadmin 2.1.2Phpmyadmin Phpmyadmin 2.2.0 Rc2Phpmyadmin Phpmyadmin 2.2 Pre1Phpmyadmin Phpmyadmin 2.8.3Phpmyadmin Phpmyadmin 2.11.5.1Phpmyadmin Phpmyadmin 2.5.0Phpmyadmin Phpmyadmin 2.11.3rc1Phpmyadmin Phpmyadmin 2.9.1.1Phpmyadmin Phpmyadmin 2.11.1Phpmyadmin Phpmyadmin 2.9.1 Rc2Phpmyadmin Phpmyadmin 2.2.0 Rc1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook