GCVE - cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.10.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.10.1:*:*:*:*:*:*:*

part: a version: 3.3.10.1 update: *

Vendor	Phpmyadmin (`a60852d8-fb42-5cb2-9d73-8590e820f745`)
Product	Phpmyadmin (`7cedec45-6907-5c63-9c4a-c7029e14bff6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:composer/phpmyadmin/phpmyadmin`	purl2cpe	2026-06-01 10:12:58.237729
`pkg:docker/phpmyadmin/phpmyadmin`	purl2cpe	2026-06-01 10:12:58.237731
`pkg:github/phpmyadmin/phpmyadmin`	purl2cpe	2026-06-01 10:12:58.237732
`pkg:rpm/fedora/phpmyadmin`	purl2cpe	2026-06-01 10:12:58.237733
`pkg:rpm/opensuse/phpmyadmin`	purl2cpe	2026-06-01 10:12:58.237735

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-3181`	vulnerable	2026-06-08 04:58:10.934057	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a (1) table name, (2) column name, or (3) index name. Published: 2011-08-29T17:00:00.000Z Updated: 2024-08-06T23:22:27.750Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45990 http://www.phpmyadmin.net/home_page/security/PMASA-2011-13.php http://secunia.com/advisories/45709 http://www.securityfocus.com/bid/49306 http://www.debian.org/security/2012/dsa-2391	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2719`	vulnerable	2026-06-08 04:58:08.627426	Details available libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain swekey.auth.lib.php local variables via a crafted query string, a related issue to CVE-2011-2505. Published: 2011-08-01T19:00:00.000Z Updated: 2024-08-06T23:08:23.775Z Open on db.gcve.eu Reference links http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=e7bb42c002885c2aca7aba4d431b8c63ae4de9b7 http://www.securityfocus.com/archive/1/518967/100/0/threaded http://seclists.org/fulldisclosure/2011/Jul/300 http://www.securityfocus.com/archive/1/519155/100/0/threaded http://secunia.com/advisories/45515	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2642`	vulnerable	2026-06-08 04:58:08.278096	Details available Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name. Published: 2011-08-01T19:00:00.000Z Updated: 2024-08-06T23:08:23.729Z Open on db.gcve.eu Reference links http://secunia.com/advisories/45515 http://secunia.com/advisories/45365 https://bugzilla.redhat.com/show_bug.cgi?id=725381 http://www.securityfocus.com/bid/48874 http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=a0823be05aa5835f207c0838b9cca67d2d9a050a	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2508`	vulnerable	2026-06-08 04:58:07.309293	Details available Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter. Published: 2011-07-14T23:00:00.000Z Updated: 2024-08-06T23:00:34.071Z Open on db.gcve.eu Reference links http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt http://www.openwall.com/lists/oss-security/2011/06/28/2 http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/ http://www.phpmyadmin.net/home_page/security/PMASA-2011-8.php http://secunia.com/advisories/45292	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2507`	vulnerable	2026-06-08 04:58:07.307691	Details available libraries/server_synchronize.lib.php in the Synchronize implementation in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly quote regular expressions, which allows remote authenticated users to inject a PCRE e (aka PREG_REPLACE_EVAL) modifier, and consequently execute arbitrary PHP code, by leveraging the ability to modify the SESSION superglobal array. Published: 2011-07-14T23:00:00.000Z Updated: 2024-08-06T23:00:34.267Z Open on db.gcve.eu Reference links http://www.xxor.se/advisories/phpMyAdmin_3.x_Multiple_Remote_Code_Executions.txt http://www.openwall.com/lists/oss-security/2011/06/28/2 http://typo3.org/teams/security/security-bulletins/typo3-sa-2011-008/ http://secunia.com/advisories/45292 http://www.openwall.com/lists/oss-security/2011/06/28/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2506`	vulnerable	2026-06-08 04:58:07.306058	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2505`	vulnerable	2026-06-08 04:58:07.302498	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

phpMYAdmin 3.3.10.1

Notes

PURL mappings

Vulnerability references

Contribute