Servers and applications
CVE-2008-5621
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tbl_structure.php with a modified table parameter. NOTE: other unspecified pages are also reachable, but they have the same root cause. NOTE: this can be leveraged to conduct SQL injection…
- Severity
- Medium 6.0
- Published
- 17 Dec 2008
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 2.1% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Over the network · Needs a login
- Attacker can
- Read some data · Change some data · Slow it down
- CVSS vector
AV:N/AC:M/Au:S/C:P/I:P/A:P- Sources
- NVD
Description
Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tbl_structure.php with a modified table parameter. NOTE: other unspecified pages are also reachable, but they have the same root cause. NOTE: this can be leveraged to conduct SQL injection attacks and execute arbitrary code.
Affected software
| Software | Affected versions |
|---|---|
phpMyAdminServers and applications · cpe:a:phpmyadmin:phpmyadmin |
All 22 release lines
|