Skip to content
OpenAdvisories
Unscored DSA-2139-1 3 CVEs

phpmyadmin - several

Published Dec 31, 2010 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 phpmyadmin 4:2.11.8.1-5+lenny7

Vulnerabilities 3

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (…

  • Unscored —
    CVE-2010-4480 Public exploit

    error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site s…

  • High —

    phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information

    phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function.