Skip to content
OpenAdvisories
Unscored DSA-1641-1 4 CVEs

phpmyadmin - several issues

Published Sep 20, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 phpmyadmin 4:2.9.1.1-8

Vulnerabilities 4

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauth…

  • Unscored —

    phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers…

  • Unscored —
    CVE-2008-4096 Public exploit EPSS 11%

    libraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitra…