Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:*:*:*:*:*:*:*

part: a version: 2.11.4 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.050690
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.050692
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.050694
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.050695
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.050696

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3697 vulnerable 2026-06-08 04:51:43.646932 Details available
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:30.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3696 vulnerable 2026-06-08 04:51:43.620200 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:29.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2284 vulnerable 2026-06-08 04:51:27.595169 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Published: 2009-07-01T12:26:00.000Z
Updated: 2024-08-07T05:44:55.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1150 vulnerable 2026-06-08 04:51:13.250999 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie.
Published: 2009-03-26T14:00:00.000Z
Updated: 2024-08-07T05:04:48.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7252 vulnerable 2026-06-08 04:51:06.240699 Details available
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Published: 2010-01-19T16:00:00.000Z
Updated: 2024-08-07T11:56:14.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7251 vulnerable 2026-06-08 04:51:06.226378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4326 vulnerable 2026-06-08 04:50:38.642519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4096 vulnerable 2026-06-08 04:50:37.780439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3457 vulnerable 2026-06-08 04:50:34.764934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3456 vulnerable 2026-06-08 04:50:34.763458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3197 vulnerable 2026-06-08 04:50:33.436002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2960 vulnerable 2026-06-08 04:50:32.735671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1924 vulnerable 2026-06-08 04:50:22.319558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.