The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade phpmyadmin | Jul 30, 2024 | Jan 19, 2010 |
| Phpmyadmin | — | Upgrade phpMyAdmin to the latest version | May 4, 2017 | Jan 19, 2010 |
| Suse | — | Upgrade phpmyadmin | Feb 17, 2015 | Jan 19, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub