https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:11:12 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-643 certa-2011-avi-643 https://cve.radiocsirt.org/vuln/certa-2011-avi-643 https://cve.radiocsirt.org/vuln/euvd-2026-116697 EUVD-2026-116697 https://cve.radiocsirt.org/vuln/euvd-2026-116697 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4107 <p>The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.</p> <p>The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4107 https://cve.radiocsirt.org/vuln/ghsa-q4mm-89q2-xffg <p><strong>Affected:</strong> Packagist: phpmyadmin/phpmyadmin</p> <p>The `simplexml_load_string` function in the XML import plug-in (`libraries/import/xml.php`) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.</p> <p><strong>Affected:</strong> Packagist: phpmyadmin/phpmyadmin</p> <p>The `simplexml_load_string` function in the XML import plug-in (`libraries/import/xml.php`) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.</p> https://cve.radiocsirt.org/vuln/ghsa-q4mm-89q2-xffg https://cve.radiocsirt.org/vuln/gsd-2011-4107 gsd-2011-4107 https://cve.radiocsirt.org/vuln/gsd-2011-4107 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 <p>phpMyAdmin-4.6.5.2-1.1 on GA media</p> <p>phpMyAdmin-4.6.5.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1