CVEvulnerability

CVE-2009-4605

5.0 MEDIUM Published 2010-01-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-01-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.

Affected configurations

• phpmyadmin phpmyadmin 2.11.0 • phpmyadmin phpmyadmin 2.11.1.0 • phpmyadmin phpmyadmin 2.11.1.1 • phpmyadmin phpmyadmin 2.11.1.2 • phpmyadmin phpmyadmin 2.11.2.0 • phpmyadmin phpmyadmin 2.11.2.1 • phpmyadmin phpmyadmin 2.11.2.2 • phpmyadmin phpmyadmin 2.11.3.0 • phpmyadmin phpmyadmin 2.11.4.0 • phpmyadmin phpmyadmin 2.11.5.0 • phpmyadmin phpmyadmin 2.11.5.1 • phpmyadmin phpmyadmin 2.11.5.2 • phpmyadmin phpmyadmin 2.11.6.0 • phpmyadmin phpmyadmin 2.11.7.0 • phpmyadmin phpmyadmin 2.11.7.1 • phpmyadmin phpmyadmin 2.11.8.0 • phpmyadmin phpmyadmin 2.11.9.0 • phpmyadmin phpmyadmin 2.11.9.1 • phpmyadmin phpmyadmin 2.11.9.2 • phpmyadmin phpmyadmin 2.11.9.3 • phpmyadmin phpmyadmin 2.11.9.4 • phpmyadmin phpmyadmin 2.11.9.5 • phpmyadmin phpmyadmin 2.11.9.6

References