Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2011-4107

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-q4mm-89q2-xffg

phpMyAdmin vulnerable to XML external entity (XXE) injection attack The `simplexml_load_string` function in the XML import plug-in (`libraries/import/xml.php`) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

gitlab/packagist/phpmyadmin/phpmyadmin/CVE-2011-4107

Improper Restriction of XML External Entity Reference The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.