Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*

part: a version: 2.11.3 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.045417
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.045419
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.045420
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.045422
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.045423

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3697 vulnerable 2026-06-08 04:51:43.646880 Details available
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:30.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3696 vulnerable 2026-06-08 04:51:43.618729 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:29.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2284 vulnerable 2026-06-08 04:51:27.593237 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Published: 2009-07-01T12:26:00.000Z
Updated: 2024-08-07T05:44:55.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1150 vulnerable 2026-06-08 04:51:13.250937 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie.
Published: 2009-03-26T14:00:00.000Z
Updated: 2024-08-07T05:04:48.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7252 vulnerable 2026-06-08 04:51:06.240611 Details available
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Published: 2010-01-19T16:00:00.000Z
Updated: 2024-08-07T11:56:14.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7251 vulnerable 2026-06-08 04:51:06.224339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5621 vulnerable 2026-06-08 04:50:52.116538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4326 vulnerable 2026-06-08 04:50:38.642469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4096 vulnerable 2026-06-08 04:50:37.780385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3457 vulnerable 2026-06-08 04:50:34.764900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3456 vulnerable 2026-06-08 04:50:34.763419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3197 vulnerable 2026-06-08 04:50:33.435051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2960 vulnerable 2026-06-08 04:50:32.734694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1924 vulnerable 2026-06-08 04:50:22.317809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1149 vulnerable 2026-06-08 04:50:19.225595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.