The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade phpmyadmin | Jul 30, 2024 | Mar 31, 2008 |
| Freebsd | — | Upgrade phpMyAdmin | Dec 10, 2025 | Apr 24, 2008 |
| Phpmyadmin | — | Upgrade phpMyAdmin to the latest version | May 4, 2017 | Mar 31, 2008 |
| Suse | — | Upgrade phpmyadminUpgrade suse-release | Feb 17, 2015 | Mar 31, 2008 |
| Ubuntu | — | Upgrade phpmyadmin | Nov 19, 2024 | Mar 31, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub