Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:3.1.0.0:*:*:*:*:*:*:*

part: a version: 3.1.0.0 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.214178
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.214180
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.214181
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.214183
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.214184

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3697 vulnerable 2026-06-08 04:51:43.647557 Details available
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:30.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3696 vulnerable 2026-06-08 04:51:43.635420 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.
Published: 2009-10-16T16:00:00.000Z
Updated: 2024-08-07T06:38:29.532Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2284 vulnerable 2026-06-08 04:51:27.611602 Details available
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.
Published: 2009-07-01T12:26:00.000Z
Updated: 2024-08-07T05:44:55.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1285 vulnerable 2026-06-08 04:51:14.320837 Details available
Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files.
Published: 2009-04-16T15:00:00.000Z
Updated: 2024-08-07T05:04:49.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1149 vulnerable 2026-06-08 04:51:13.249985 Details available
CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters.
Published: 2009-03-26T14:00:00.000Z
Updated: 2024-08-07T05:04:48.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1148 vulnerable 2026-06-08 04:51:13.246955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5621 vulnerable 2026-06-08 04:50:52.123784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.