High DLA-0014-1 4 CVEs

phpmyadmin - security update

Published Jul 9, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	phpmyadmin	4:3.3.7-8

Vulnerabilities 4

High 8.5

CVE-2013-3239 Public exploit

phpMyAdmin Remote Code Execution

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file a…

phpmyadmin phpmyadmin/phpmyadmin Debian Packagist

Apr 26, 2013
Unscored —

CVE-2013-4995

Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote auth…

phpmyadmin Debian

Jul 30, 2013
Unscored —

CVE-2013-4996

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow r…

phpmyadmin Debian

Jul 30, 2013
Unscored —

CVE-2013-5003

Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authent…

phpmyadmin Debian

Jul 30, 2013