Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.11.1:*:*:*:*:*:*:*

part: a version: 2.11.11.1 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.033274
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.033276
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.033277
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.033278
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.033280

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0987 vulnerable 2026-06-08 04:56:40.495959 Details available
The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by creating a bookmark.
Published: 2011-02-14T21:00:00.000Z
Updated: 2024-08-06T22:14:26.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0986 vulnerable 2026-06-08 04:56:40.493910 Details available
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
Published: 2011-02-14T21:00:00.000Z
Updated: 2024-08-06T22:14:26.797Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.