Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.5.2:*:*:*:*:*:*:*

part: a version: 2.11.5.2 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.055999
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.056000
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.056002
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.056003
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.056004

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1879 vulnerable 2026-06-08 05:05:26.577645 Details available
Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.
Published: 2014-02-20T11:00:00.000Z
Updated: 2024-08-06T09:58:15.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2642 vulnerable 2026-06-08 04:58:08.269678 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name.
Published: 2011-08-01T19:00:00.000Z
Updated: 2024-08-06T23:08:23.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0987 vulnerable 2026-06-08 04:56:40.495714 Details available
The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by creating a bookmark.
Published: 2011-02-14T21:00:00.000Z
Updated: 2024-08-06T22:14:26.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0986 vulnerable 2026-06-08 04:56:40.487798 Details available
phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file.
Published: 2011-02-14T21:00:00.000Z
Updated: 2024-08-06T22:14:26.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4481 vulnerable 2026-06-08 04:56:28.696054 Details available
phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.
Published: 2010-12-17T18:00:00.000Z
Updated: 2024-08-07T03:51:16.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4329 vulnerable 2026-06-08 04:56:27.054851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3056 vulnerable 2026-06-08 04:55:12.407610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3055 vulnerable 2026-06-08 04:55:12.399027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4605 vulnerable 2026-06-08 04:51:49.099414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3697 vulnerable 2026-06-08 04:51:43.647049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3696 vulnerable 2026-06-08 04:51:43.623561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2284 vulnerable 2026-06-08 04:51:27.599180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1150 vulnerable 2026-06-08 04:51:13.251108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7252 vulnerable 2026-06-08 04:51:06.240875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7251 vulnerable 2026-06-08 04:51:06.230471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5621 vulnerable 2026-06-08 04:50:52.119081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4326 vulnerable 2026-06-08 04:50:38.642618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4096 vulnerable 2026-06-08 04:50:37.780542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3457 vulnerable 2026-06-08 04:50:34.765014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3456 vulnerable 2026-06-08 04:50:34.763549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3197 vulnerable 2026-06-08 04:50:33.437785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2960 vulnerable 2026-06-08 04:50:32.737585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6100 vulnerable 2026-06-08 04:50:07.769566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.