Skip to content
OpenAdvisories
Medium DSA-2391-1 3 CVEs

phpmyadmin - several

Published Jan 22, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 phpmyadmin 4:3.3.7-7

Vulnerabilities 3

  • Medium 6.5
    CVE-2011-4107 Public exploit EPSS 13%

    phpMyAdmin vulnerable to XML external entity (XXE) injection attack

    The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, …

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Low —
    CVE-2011-1940

    phpMyAdmin Vulnerable to Cross-Site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, rel…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2011-3181

    Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4…

    phpmyadmin Debian