Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.0.0:*:*:*:*:*:*:*

part: a version: 3.5.0.0 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.254678
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.254679
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.254681
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.254682
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.254683

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-1879 vulnerable 2026-06-08 05:05:26.622080 Details available
Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.
Published: 2014-02-20T11:00:00.000Z
Updated: 2024-08-06T09:58:15.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5029 vulnerable 2026-06-08 05:04:50.648954 Details available
phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.
Published: 2013-08-19T23:00:00.000Z
Updated: 2024-09-16T20:42:13.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5003 vulnerable 2026-06-08 05:04:50.539546 Details available
Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via (1) the scale parameter to pmd_pdf.php or (2) the pdf_page_number parameter to schema_export.php.
Published: 2013-07-30T18:00:00.000Z
Updated: 2024-08-06T16:59:41.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5002 vulnerable 2026-06-08 05:04:50.538600 Details available
Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schema_export.php.
Published: 2013-07-30T18:00:00.000Z
Updated: 2024-08-06T16:59:41.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5000 vulnerable 2026-06-08 05:04:50.537355 Details available
phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to config.default.php and other files.
Published: 2013-07-30T18:00:00.000Z
Updated: 2024-09-16T19:05:30.791Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4998 vulnerable 2026-06-08 05:04:50.535941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4997 vulnerable 2026-06-08 05:04:50.535168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4996 vulnerable 2026-06-08 05:04:50.534446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4995 vulnerable 2026-06-08 05:04:50.525395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3239 vulnerable 2026-06-08 05:04:30.565523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3238 vulnerable 2026-06-08 05:04:30.558436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1937 vulnerable 2026-06-08 05:03:57.350409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5368 vulnerable 2026-06-08 05:02:56.307913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5339 vulnerable 2026-06-08 05:02:56.229503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4579 vulnerable 2026-06-08 05:02:51.575857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4345 vulnerable 2026-06-08 05:02:17.074580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4219 vulnerable 2026-06-08 05:02:16.499366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.