Skip to content
OpenAdvisories
Unscored DSA-2975-1 5 CVEs

phpmyadmin - security update

Published Jul 9, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 phpmyadmin 4:3.4.11.1-2+deb7u1

Vulnerabilities 5

  • Unscored —
    CVE-2013-4995

    Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote auth…

    phpmyadmin Debian
  • Unscored —
    CVE-2013-4996

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow r…

    phpmyadmin Debian
  • Low —
    CVE-2013-5002

    phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value

    Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value t…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2013-5003

    Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authent…

    phpmyadmin Debian
  • Unscored —
    CVE-2014-1879

    Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to …

    phpmyadmin phpmyadmin Debian Ubuntu