CVE-2011-0987

The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for remote authenticated users to trigger another user's execution of a SQL query by creating a bookmark.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
phpmyadminphpmyadmin
2.11.0
phpmyadminphpmyadmin
2.11.1.0
phpmyadminphpmyadmin
2.11.1.1
phpmyadminphpmyadmin
2.11.1.2
phpmyadminphpmyadmin
2.11.2.0
phpmyadminphpmyadmin
2.11.2.1
phpmyadminphpmyadmin
2.11.2.2
phpmyadminphpmyadmin
2.11.3.0
phpmyadminphpmyadmin
2.11.4.0
phpmyadminphpmyadmin
2.11.5.0
phpmyadminphpmyadmin
2.11.5.1
phpmyadminphpmyadmin
2.11.5.2
phpmyadminphpmyadmin
2.11.6.0
phpmyadminphpmyadmin
2.11.7.0
phpmyadminphpmyadmin
2.11.7.1
phpmyadminphpmyadmin
2.11.8.0
phpmyadminphpmyadmin
2.11.9.0
phpmyadminphpmyadmin
2.11.9.1
phpmyadminphpmyadmin
2.11.9.2
phpmyadminphpmyadmin
2.11.9.3
phpmyadminphpmyadmin
2.11.9.4
phpmyadminphpmyadmin
2.11.9.5
phpmyadminphpmyadmin
2.11.9.6
phpmyadminphpmyadmin
2.11.10.0
phpmyadminphpmyadmin
2.11.10.1
phpmyadminphpmyadmin
2.11.11
phpmyadminphpmyadmin
2.11.11.1
phpmyadminphpmyadmin
2.11.11.2
phpmyadminphpmyadmin
3.0.0
phpmyadminphpmyadmin
3.0.0:alpha
phpmyadminphpmyadmin
3.0.0:beta
phpmyadminphpmyadmin
3.0.0:rc1
phpmyadminphpmyadmin
3.0.1
phpmyadminphpmyadmin
3.0.1:rc1
phpmyadminphpmyadmin
3.0.1.1
phpmyadminphpmyadmin
3.1.0
phpmyadminphpmyadmin
3.1.0:beta1
phpmyadminphpmyadmin
3.1.1
phpmyadminphpmyadmin
3.1.1:rc1
phpmyadminphpmyadmin
3.1.2
phpmyadminphpmyadmin
3.1.2:rc1
phpmyadminphpmyadmin
3.1.3
phpmyadminphpmyadmin
3.1.3:rc1
phpmyadminphpmyadmin
3.1.3.1
phpmyadminphpmyadmin
3.1.3.2
phpmyadminphpmyadmin
3.1.4
phpmyadminphpmyadmin
3.1.4:rc2
phpmyadminphpmyadmin
3.1.5
phpmyadminphpmyadmin
3.1.5:rc1
phpmyadminphpmyadmin
3.2.0
phpmyadminphpmyadmin
3.2.0:beta1
phpmyadminphpmyadmin
3.2.0:rc1
phpmyadminphpmyadmin
3.2.1
phpmyadminphpmyadmin
3.2.1:rc1
phpmyadminphpmyadmin
3.2.2
phpmyadminphpmyadmin
3.2.2:rc1
phpmyadminphpmyadmin
3.3.0.0
phpmyadminphpmyadmin
3.3.1.0
phpmyadminphpmyadmin
3.3.2.0
phpmyadminphpmyadmin
3.3.3.0
phpmyadminphpmyadmin
3.3.4.0
phpmyadminphpmyadmin
3.3.5.0
phpmyadminphpmyadmin
3.3.5.1
phpmyadminphpmyadmin
3.3.6
phpmyadminphpmyadmin
3.3.7
phpmyadminphpmyadmin
3.3.8
phpmyadminphpmyadmin
3.3.8.1
phpmyadminphpmyadmin
3.3.9.0
phpmyadminphpmyadmin
3.3.9.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
phpmyadmin
bullseye
4:5.0.4+dfsg2-2+deb11u1
fixed
bookworm
4:5.2.1+dfsg-1
fixed
sid
4:5.2.1+dfsg-4
fixed
trixie
4:5.2.1+dfsg-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
phpmyadmin
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
not-affected
oneiric
not-affected
natty
not-affected
maverick
Fixed 4:3.3.7-5build0.10.10.1
released
lucid
ignored
karmic
ignored
hardy
ignored
dapper
ignored
References