Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.0:*:*:*:*:*:*:*

part: a version: 2.1.0 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.003666
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.003667
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.003669
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.003670
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.003671

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2284 vulnerable 2026-06-08 04:51:27.528561 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Published: 2009-07-01T12:26:00.000Z
Updated: 2024-08-07T05:44:55.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4326 vulnerable 2026-06-08 04:50:38.640458 Details available
The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms and conduct XSS attacks via a NUL byte inside a "</script" sequence.
Published: 2008-09-30T16:00:00.000Z
Updated: 2024-08-07T10:08:35.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4096 vulnerable 2026-06-08 04:50:37.779744 Details available
libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to server_databases.php with a sort_by parameter containing PHP sequences, which are processed by create_function.
Published: 2008-09-17T18:06:00.000Z
Updated: 2024-08-07T10:00:42.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3457 vulnerable 2026-06-08 04:50:34.764422 Details available
Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted setup arguments. NOTE: this issue can only be exploited in limited scenarios in which the attacker must be able to modify config/config.inc.php.
Published: 2008-08-04T19:00:00.000Z
Updated: 2024-08-07T09:37:27.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3456 vulnerable 2026-06-08 04:50:34.762977 Details available
phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it easier for remote attackers to conduct spoofing or phishing activities via a cross-site framing attack.
Published: 2008-08-04T19:00:00.000Z
Updated: 2024-08-07T09:37:27.077Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3197 vulnerable 2026-06-08 04:50:33.380624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6100 vulnerable 2026-06-08 04:50:07.735028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1678 vulnerable 2026-06-08 04:48:57.783896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.