https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T05:44:25.251623+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-380 certa-2011-avi-380 — Plusieurs vulnérabilités dans phpMyAdmin permettent à un utilisateur distant d'exécuter du code arbitraire, de porter a… 2026-10-15T05:44:25.254880+00:00 certa-2011-avi-380 https://cve.radiocsirt.org/vuln/euvd-2026-115582 EUVD-2026-115582 2026-10-15T05:44:25.254912+00:00 EUVD-2026-115582 https://cve.radiocsirt.org/vuln/fkie_cve-2011-2506 fkie_cve-2011-2506 2026-10-15T05:44:25.254927+00:00

setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.

 https://cve.radiocsirt.org/vuln/ghsa-p6h7-29r2-g88f GHSA-p6h7-29r2-g88f — phpMyAdmin vulnerable to static code injection 2026-10-15T05:44:25.254953+00:00

Affected: Packagist: phpmyadmin/phpmyadmin

`setup/lib/ConfigGenerator.class.php` in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to conduct static code injection attacks by leveraging the ability to modify the SESSION superglobal array.

 https://cve.radiocsirt.org/vuln/gsd-2011-2506 gsd-2011-2506 2026-10-15T05:44:25.254978+00:00 gsd-2011-2506