https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:00:20.713463+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-643 certa-2011-avi-643 — Une vulnérabilité dans <span class="textit">phpMyAdmin</span> permet à une personne malveillante de récupérer un fichie… 2026-10-05T12:00:20.718992+00:00 certa-2011-avi-643 https://cve.radiocsirt.org/vuln/euvd-2026-116697 EUVD-2026-116697 2026-10-05T12:00:20.719034+00:00 EUVD-2026-116697 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4107 fkie_cve-2011-4107 2026-10-05T12:00:20.719048+00:00

The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

 https://cve.radiocsirt.org/vuln/ghsa-q4mm-89q2-xffg GHSA-q4mm-89q2-xffg — phpMyAdmin vulnerable to XML external entity (XXE) injection attack 2026-10-05T12:00:20.719077+00:00

Affected: Packagist: phpmyadmin/phpmyadmin

The `simplexml_load_string` function in the XML import plug-in (`libraries/import/xml.php`) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

 https://cve.radiocsirt.org/vuln/gsd-2011-4107 gsd-2011-4107 2026-10-05T12:00:20.719101+00:00 gsd-2011-4107 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 openSUSE-SU-2024:10054-1 — phpMyAdmin-4.6.5.2-1.1 on GA media 2026-10-05T12:00:20.719113+00:00

phpMyAdmin-4.6.5.2-1.1 on GA media