Vulnerability Database · Debian · Package report
phpmyadmin: vulnerability history, versions and safety
phpmyadmin is a package in the Debian ecosystem. Vulert records 6 vulnerabilities for it across 9 releases, from Apr 2008 to Oct 2009. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on phpmyadmin i
Updated on 22 Oct 2026
Every vulnerability Vulert records for this package has a fix, and the newest was recorded 25 Oct 2009. Apply the fixes listed below and you are clear.
What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →
- Vulnerabilities on record 6 over 1 year · 0 in the last year i
- Latest disclosure 25 Oct 2009 i
- Highest CVSS n/a i
- With no published fix 0 i
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert holds for phpmyadmin, newest first, with the vulnerabilities that name it. A version with a count of zero has no recorded vulnerabilities; open a version to see the vulnerabilities it is exposed to.
| Version | Vulert vulnerabilities | Fix published | Details |
|---|---|---|---|
| 4:2.9.1.1-11 | U1 | Yes | Details → |
| 4:2.9.1.1-10 | U2 | Yes | Details → |
| 4:2.9.1.1-9 | U3 | Yes | Details → |
| 4:2.9.1.1-8 | U4 | Yes | Details → |
| 4:2.9.1.1-7 | U5 | Yes | Details → |
| 4:2.9.1.1-6 | U6 | Yes | Details → |
| 4:2.9.1.1-5 | U6 | Yes | Details → |
| 4:2.9.1.1-4 | U6 | Yes | Details → |
| 4:2.9.1.1-3 | U6 | Yes | Details → |
Newest 9 of 9 versions on record. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 6 were recorded in the last 12 months.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for phpmyadmin
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| Vulnerability in phpMyAdmin: Arbitrary File Read, Session Data Disclosure, XSS, and SQL Injection | N/A unrated | 4:2.9.1.1-7 | 24 Apr 2008 |
| Vulnerability in phpMyAdmin - Several Issues | N/A unrated | 4:2.9.1.1-8 | 20 Sep 2008 |
| Cross-Site Scripting Vulnerability in phpMyAdmin | N/A unrated | 4:2.9.1.1-9 | 30 Nov 2008 |
| Arbitrary Code Execution in phpMyAdmin | N/A unrated | 4:2.9.1.1-10 | 11 Feb 2009 |
| Multiple Vulnerabilities in phpMyAdmin | N/A unrated | 4:2.9.1.1-11 | 25 Jun 2009 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 22/Oct/2026 · Vulnerabilities in our DB: 524173
