Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*

part: a version: 2.11.0.0 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.024349
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.024351
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.024353
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.024354
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.024356

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3697 vulnerable 2026-06-08 04:51:43.646684 Details available
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:30.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3696 vulnerable 2026-06-08 04:51:43.613181 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:29.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2284 vulnerable 2026-06-08 04:51:27.586528 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Published: 2009-07-01T12:26:00.000Z
Updated: 2024-08-07T05:44:55.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7252 vulnerable 2026-06-08 04:51:06.240320 Details available
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Published: 2010-01-19T16:00:00.000Z
Updated: 2024-08-07T11:56:14.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7251 vulnerable 2026-06-08 04:51:06.217610 Details available
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors.
Published: 2010-01-19T16:00:00.000Z
Updated: 2024-08-07T11:56:14.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5621 vulnerable 2026-06-08 04:50:52.111967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4326 vulnerable 2026-06-08 04:50:38.642263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4096 vulnerable 2026-06-08 04:50:37.780034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3457 vulnerable 2026-06-08 04:50:34.764749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3456 vulnerable 2026-06-08 04:50:34.763255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3197 vulnerable 2026-06-08 04:50:33.432875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1149 vulnerable 2026-06-08 04:50:19.219849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.