Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/phpmyadmin@4:2.8.1-1?distro=trixie |
| Type | deb |
| Namespace | debian |
| Name | phpmyadmin |
| Version | 4:2.8.1-1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 4:2.8.2-0.1 |
| Latest_non_vulnerable_version | 4:5.2.3+dfsg-1 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-56fk-zgcc-aug8 |
| vulnerability_id |
VCID-56fk-zgcc-aug8 |
| summary |
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scripts. NOTE: the lang parameter is already covered by CVE-2006-2031. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2006-2417 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68784 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68802 |
| published_at |
2026-04-07T12:55:00Z |
|
| 2 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68822 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68852 |
| published_at |
2026-04-08T12:55:00Z |
|
| 4 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68871 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68894 |
| published_at |
2026-04-11T12:55:00Z |
|
| 6 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68879 |
| published_at |
2026-04-21T12:55:00Z |
|
| 7 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.6885 |
| published_at |
2026-04-13T12:55:00Z |
|
| 8 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68891 |
| published_at |
2026-04-16T12:55:00Z |
|
| 9 |
| value |
0.00579 |
| scoring_system |
epss |
| scoring_elements |
0.68902 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2006-2417 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2006-2417
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-56fk-zgcc-aug8 |
|
| 1 |
| url |
VCID-c8fs-sxu6-63ht |
| vulnerability_id |
VCID-c8fs-sxu6-63ht |
| summary |
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2006-2031 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61144 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61224 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61252 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61219 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61266 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61281 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61301 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61287 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61269 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61308 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61313 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.00409 |
| scoring_system |
epss |
| scoring_elements |
0.61293 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2006-2031 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2006-2031
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-c8fs-sxu6-63ht |
|
| 2 |
| url |
VCID-swmp-yrmd-2udj |
| vulnerability_id |
VCID-swmp-yrmd-2udj |
| summary |
Cross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow remote attackers to inject arbitrary web script or HTML via the db parameter in unknown scripts. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2006-2418 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87864 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87874 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87887 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87891 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87912 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87918 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87929 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87922 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87921 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.0368 |
| scoring_system |
epss |
| scoring_elements |
0.87935 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2006-2418 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2006-2418
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-swmp-yrmd-2udj |
|
| 3 |
| url |
VCID-twxk-hnb4-hfb5 |
| vulnerability_id |
VCID-twxk-hnb4-hfb5 |
| summary |
SQL injection vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to execute arbitrary SQL commands via the sql_query parameter. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2006-1804 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76472 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76476 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76505 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76488 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.7652 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76531 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76557 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76536 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.7653 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76571 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76575 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.00963 |
| scoring_system |
epss |
| scoring_elements |
0.76563 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2006-1804 |
|
| 1 |
|
| 2 |
|
|
| fixed_packages |
|
| aliases |
CVE-2006-1804
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-twxk-hnb4-hfb5 |
|
| 4 |
| url |
VCID-xruc-tfuk-m3gf |
| vulnerability_id |
VCID-xruc-tfuk-m3gf |
| summary |
Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sql_query parameter. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2006-1803 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92567 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92572 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92579 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92581 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92592 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92596 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92602 |
| published_at |
2026-04-13T12:55:00Z |
|
| 7 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92603 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92615 |
| published_at |
2026-04-16T12:55:00Z |
|
| 9 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92614 |
| published_at |
2026-04-18T12:55:00Z |
|
| 10 |
| value |
0.08966 |
| scoring_system |
epss |
| scoring_elements |
0.92617 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2006-1803 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2006-1803
|
| risk_score |
0.2 |
| exploitability |
2.0 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xruc-tfuk-m3gf |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:2.8.1-1%3Fdistro=trixie |