Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/phpmyadmin@4:2.9.0.2-0.1?distro=trixie
Typedeb
Namespacedebian
Namephpmyadmin
Version4:2.9.0.2-0.1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4:2.9.0.3-1
Latest_non_vulnerable_version4:5.2.3+dfsg-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-5s9r-7z3f-wkcy
vulnerability_id VCID-5s9r-7z3f-wkcy
summary Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by (1) directly setting a token in the URL though dynamic variable evaluation and (2) unsetting arbitrary variables via the _REQUEST array, related to (a) libraries/common.lib.php, (b) session.inc.php, and (c) url_generating.lib.php. NOTE: the PHP unset function vector is covered by CVE-2006-3017.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-5116
reference_id
reference_type
scores
0
value 0.03863
scoring_system epss
scoring_elements 0.8816
published_at 2026-04-01T12:55:00Z
1
value 0.03863
scoring_system epss
scoring_elements 0.88168
published_at 2026-04-02T12:55:00Z
2
value 0.03863
scoring_system epss
scoring_elements 0.88184
published_at 2026-04-04T12:55:00Z
3
value 0.03863
scoring_system epss
scoring_elements 0.88191
published_at 2026-04-07T12:55:00Z
4
value 0.03863
scoring_system epss
scoring_elements 0.8821
published_at 2026-04-08T12:55:00Z
5
value 0.03863
scoring_system epss
scoring_elements 0.88216
published_at 2026-04-09T12:55:00Z
6
value 0.03863
scoring_system epss
scoring_elements 0.88227
published_at 2026-04-11T12:55:00Z
7
value 0.03863
scoring_system epss
scoring_elements 0.88219
published_at 2026-04-13T12:55:00Z
8
value 0.03863
scoring_system epss
scoring_elements 0.88232
published_at 2026-04-16T12:55:00Z
9
value 0.03863
scoring_system epss
scoring_elements 0.88231
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-5116
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5116
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5116
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391090
reference_id 391090
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391090
fixed_packages
0
url pkg:deb/debian/phpmyadmin@4:2.9.0.2-0.1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:2.9.0.2-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:2.9.0.2-0.1%3Fdistro=trixie
1
url pkg:deb/debian/phpmyadmin@4:5.0.4%2Bdfsg2-2%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:5.0.4%2Bdfsg2-2%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-na3j-h3qr-k7dc
1
vulnerability VCID-ndjn-p6gb-u7g4
2
vulnerability VCID-rqy8-n6fr-hqey
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.0.4%252Bdfsg2-2%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/phpmyadmin@4:5.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:5.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.1%252Bdfsg-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.2-really%252Bdfsg-1%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/phpmyadmin@4:5.2.3%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:5.2.3%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.3%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2006-5116
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5s9r-7z3f-wkcy
1
url VCID-nwq5-yv4h-5qch
vulnerability_id VCID-nwq5-yv4h-5qch
summary phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-5117
reference_id
reference_type
scores
0
value 0.00463
scoring_system epss
scoring_elements 0.64201
published_at 2026-04-01T12:55:00Z
1
value 0.00463
scoring_system epss
scoring_elements 0.64258
published_at 2026-04-02T12:55:00Z
2
value 0.00463
scoring_system epss
scoring_elements 0.64286
published_at 2026-04-04T12:55:00Z
3
value 0.00463
scoring_system epss
scoring_elements 0.64246
published_at 2026-04-07T12:55:00Z
4
value 0.00463
scoring_system epss
scoring_elements 0.64296
published_at 2026-04-08T12:55:00Z
5
value 0.00463
scoring_system epss
scoring_elements 0.64311
published_at 2026-04-09T12:55:00Z
6
value 0.00463
scoring_system epss
scoring_elements 0.64324
published_at 2026-04-11T12:55:00Z
7
value 0.00463
scoring_system epss
scoring_elements 0.64313
published_at 2026-04-12T12:55:00Z
8
value 0.00463
scoring_system epss
scoring_elements 0.64287
published_at 2026-04-13T12:55:00Z
9
value 0.00463
scoring_system epss
scoring_elements 0.64321
published_at 2026-04-21T12:55:00Z
10
value 0.00463
scoring_system epss
scoring_elements 0.64332
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-5117
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5117
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5117
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391090
reference_id 391090
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391090
fixed_packages
0
url pkg:deb/debian/phpmyadmin@4:2.9.0.2-0.1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:2.9.0.2-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:2.9.0.2-0.1%3Fdistro=trixie
1
url pkg:deb/debian/phpmyadmin@4:5.0.4%2Bdfsg2-2%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:5.0.4%2Bdfsg2-2%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-na3j-h3qr-k7dc
1
vulnerability VCID-ndjn-p6gb-u7g4
2
vulnerability VCID-rqy8-n6fr-hqey
3
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.0.4%252Bdfsg2-2%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/phpmyadmin@4:5.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:5.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zd8d-c1nk-g7a4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.1%252Bdfsg-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.2-really%252Bdfsg-1%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/phpmyadmin@4:5.2.3%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/phpmyadmin@4:5.2.3%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.3%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2006-5117
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nwq5-yv4h-5qch
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:2.9.0.2-0.1%3Fdistro=trixie