CVEvulnerability
CVE-2009-3697
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-10-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified interface parameters.
Affected configurations
• phpmyadmin phpmyadmin 2.11.0
• phpmyadmin phpmyadmin 2.11.0.0
• phpmyadmin phpmyadmin 2.11.0beta1
• phpmyadmin phpmyadmin 2.11.1
• phpmyadmin phpmyadmin 2.11.1.0
• phpmyadmin phpmyadmin 2.11.1.1
• phpmyadmin phpmyadmin 2.11.1.2
• phpmyadmin phpmyadmin 2.11.2
• phpmyadmin phpmyadmin 2.11.2.0
• phpmyadmin phpmyadmin 2.11.2.1
• phpmyadmin phpmyadmin 2.11.2.2
• phpmyadmin phpmyadmin 2.11.3
• phpmyadmin phpmyadmin 2.11.3.0
• phpmyadmin phpmyadmin 2.11.4
• phpmyadmin phpmyadmin 2.11.4.0
• phpmyadmin phpmyadmin 2.11.5
• phpmyadmin phpmyadmin 2.11.5.0
• phpmyadmin phpmyadmin 2.11.5.1
• phpmyadmin phpmyadmin 2.11.5.2
• phpmyadmin phpmyadmin 2.11.6
• phpmyadmin phpmyadmin 2.11.6.0
• phpmyadmin phpmyadmin 2.11.7
• phpmyadmin phpmyadmin 2.11.7.0
• phpmyadmin phpmyadmin 2.11.8
• phpmyadmin phpmyadmin 2.11.9
• phpmyadmin phpmyadmin 2.11.9.0
• phpmyadmin phpmyadmin 2.11.9.1
• phpmyadmin phpmyadmin 2.11.9.2
• phpmyadmin phpmyadmin 2.11.9.3
• phpmyadmin phpmyadmin 2.11.9.4
• phpmyadmin phpmyadmin 2.11.9.5
• phpmyadmin phpmyadmin 3.0.0
• phpmyadmin phpmyadmin 3.0.0-alpha
• phpmyadmin phpmyadmin 3.0.0-beta
• phpmyadmin phpmyadmin 3.0.1
• phpmyadmin phpmyadmin 3.0.1.1
• phpmyadmin phpmyadmin 3.1.0
• phpmyadmin phpmyadmin 3.1.0-beta1
• phpmyadmin phpmyadmin 3.1.0.0
• phpmyadmin phpmyadmin 3.1.1
• phpmyadmin phpmyadmin 3.1.2
• phpmyadmin phpmyadmin 3.1.3
• phpmyadmin phpmyadmin 3.1.3.1
• phpmyadmin phpmyadmin 3.1.3.2
• phpmyadmin phpmyadmin 3.1.4
• phpmyadmin phpmyadmin 3.1.5
• phpmyadmin phpmyadmin 3.2.0
• phpmyadmin phpmyadmin 3.2.0-beta1
• phpmyadmin phpmyadmin 3.2.0.1
• phpmyadmin phpmyadmin 3.2.1
• phpmyadmin phpmyadmin 3.2.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://bugs.gentoo.org/show_bug.cgi?id=288899 bugs.gentoo.org
- http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html dfn.dl.sourceforge.net
- http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html dfn.dl.sourceforge.net
- http://freshmeat.net/projects/phpmyadmin/releases/306667 freshmeat.net
- http://freshmeat.net/projects/phpmyadmin/releases/306669 freshmeat.net
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html lists.opensuse.org
- http://marc.info/?l=oss-security&m=125553728512853&w=2 marc.info
- http://marc.info/?l=oss-security&m=125561979001460&w=2 marc.info
- http://secunia.com/advisories/37016 Vendor Advisory
- http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/ typo3.org
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/ typo3.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:274 www.mandriva.com
- http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php Vendor Advisory
- http://www.securityfocus.com/bid/36658 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2899 Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=528769 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53741 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html www.redhat.com
- http://bugs.gentoo.org/show_bug.cgi?id=288899 bugs.gentoo.org
- http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/2.11.9.6/phpMyAdmin-2.11.9.6-notes.html dfn.dl.sourceforge.net
- http://dfn.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.2.2.1/phpMyAdmin-3.2.2.1-notes.html dfn.dl.sourceforge.net
- http://freshmeat.net/projects/phpmyadmin/releases/306667 freshmeat.net
- http://freshmeat.net/projects/phpmyadmin/releases/306669 freshmeat.net
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html lists.opensuse.org
- http://marc.info/?l=oss-security&m=125553728512853&w=2 marc.info
- http://marc.info/?l=oss-security&m=125561979001460&w=2 marc.info
- http://secunia.com/advisories/37016 Vendor Advisory
- http://typo3.org/extensions/repository/view/phpmyadmin/4.5.0/ typo3.org
- http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-015/ typo3.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:274 www.mandriva.com
- http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php Vendor Advisory
- http://www.securityfocus.com/bid/36658 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2899 Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=528769 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53741 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00467.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-October/msg00490.html www.redhat.com