Skip to content
OpenAdvisories
Unscored DSA-1370-2 5 CVEs

phpmyadmin - several vulnerabilities

Published Sep 10, 2007 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 phpmyadmin 4:2.6.2-3sarge5
Debian · 4.0 phpmyadmin 4:2.9.1.1-4

Vulnerabilities 5

  • Unscored —
    CVE-2006-6942 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbit…

  • Unscored —

    phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false hea…

  • Unscored —

    The PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2 does not limit recursion …

  • Unscored —

    Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cr…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbi…