Skip to content
OpenAdvisories
Unscored DSA-1207-1 5 CVEs

phpmyadmin

Published Nov 9, 2006 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 phpmyadmin 4:2.6.2-3sarge2

Vulnerabilities 5

  • Medium —

    phpMyAdmin CRLF Injection Vulnerability

    CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via unspecified scripts.

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.7.0 allow remote attackers to inject arbitra…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbit…

  • Unscored —

    Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to i…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to per…