Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.9:*:*:*:*:*:*:*

part: a version: 2.11.9 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.073620
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.073621
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.073623
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.073624
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.073625

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3697 vulnerable 2026-06-08 04:51:43.647176 Details available
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:30.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3696 vulnerable 2026-06-08 04:51:43.627297 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:29.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2284 vulnerable 2026-06-08 04:51:27.603727 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Published: 2009-07-01T12:26:00.000Z
Updated: 2024-08-07T05:44:55.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1150 vulnerable 2026-06-08 04:51:13.251249 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie.
Published: 2009-03-26T14:00:00.000Z
Updated: 2024-08-07T05:04:48.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7252 vulnerable 2026-06-08 04:51:06.241088 Details available
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.
Published: 2010-01-19T16:00:00.000Z
Updated: 2024-08-07T11:56:14.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7251 vulnerable 2026-06-08 04:51:06.235193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4326 vulnerable 2026-06-08 04:50:38.656546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.