Skip to content
OpenAdvisories
Unscored DSA-1918-1 2 CVEs

phpmyadmin - several vulnerabilities

Published Oct 25, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 phpmyadmin 4:2.9.1.1-13
Debian · 5.0 phpmyadmin 4:2.11.8.1-5+lenny3

Vulnerabilities 2

  • Medium —
    CVE-2009-3696

    phpMyAdmin Cross-site Scripting In MySQL Table Name

    Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name for a MySQL table.

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2009-3697

    SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x befo…

    phpmyadmin Debian