https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:51:52.626255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-106635 EUVD-2026-106635 2026-10-05T10:51:52.633667+00:00 EUVD-2026-106635 https://cve.radiocsirt.org/vuln/fkie_cve-2013-3239 fkie_cve-2013-3239 2026-10-05T10:51:52.633714+00:00

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.

 https://cve.radiocsirt.org/vuln/ghsa-gg36-9346-9qx9 GHSA-gg36-9346-9qx9 — phpMyAdmin Remote Code Execution 2026-10-05T10:51:52.633760+00:00

Affected: Packagist: phpmyadmin/phpmyadmin

phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file as an executable file by the Apache HTTP Server, as demonstrated by a .php.sql filename.

 https://cve.radiocsirt.org/vuln/gsd-2013-3239 gsd-2013-3239 2026-10-05T10:51:52.633798+00:00 gsd-2013-3239 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 openSUSE-SU-2024:10054-1 — phpMyAdmin-4.6.5.2-1.1 on GA media 2026-10-05T10:51:52.633817+00:00

phpMyAdmin-4.6.5.2-1.1 on GA media