Search for packages
| purl | pkg:composer/phpmyadmin/phpmyadmin@3.3.0 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ejnb-3ya3-uqa6
Aliases: CVE-2011-1940 GHSA-4q58-5x28-53wv |
phpMyAdmin Vulnerable to Cross-Site Scripting Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to (1) libraries/tbl_links.inc.php and (2) tbl_tracking.php. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-gs9p-kgrd-vqd4
Aliases: CVE-2011-0986 GHSA-wcmm-28rg-mg3r |
Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. |
Affected by 0 other vulnerabilities. |
|
VCID-jypm-yg7x-p3cn
Aliases: CVE-2011-4107 GHSA-q4mm-89q2-xffg |
Improper Restriction of XML External Entity Reference The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-z6t5-jasy-vbfs
Aliases: CVE-2011-2508 GHSA-q6vw-39cg-wjjf |
phpMyAdmin Directory Traversal vulnerability Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in a GLOBALS[mime_map][$meta->name][transformation] parameter. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||