Unrated severityNVD Advisory· Published Mar 4, 2008· Updated Jun 16, 2026
CVE-2008-1149
CVE-2008-1149
Description
phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attackers in the same domain to override certain variables and conduct SQL injection and Cross-Site Request Forgery (CSRF) attacks by using crafted cookies.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*+ 18 more
- cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*range: <=2.11.4
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.3:rc1:*:*:*:*:*:*
- cpe:2.3:a:phpmyadmin:phpmyadmin:2.11.4:rc1:*:*:*:*:*:*
- (no CPE)range: <2.11.5
Patches
Vulnerability mechanics
References
19- www.debian.org/security/2008/dsa-1557nvdPatch
- www.phpmyadmin.net/home_page/security.phpnvdPatchVendor Advisory
- www.securityfocus.com/bid/28068nvdPatch
- secunia.com/advisories/29143nvdVendor Advisory
- secunia.com/advisories/29200nvdVendor Advisory
- secunia.com/advisories/29287nvdVendor Advisory
- secunia.com/advisories/29964nvdVendor Advisory
- secunia.com/advisories/30816nvdVendor Advisory
- secunia.com/advisories/32834nvdVendor Advisory
- secunia.com/advisories/33822nvdVendor Advisory
- www.vupen.com/english/advisories/2008/0731nvdVendor Advisory
- www.vupen.com/english/advisories/2008/0758nvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2008-11/msg00002.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.htmlnvd
- www.gentoo.org/security/en/glsa/glsa-200803-15.xmlnvd
- www.mandriva.com/security/advisoriesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/40968nvd
- www.redhat.com/archives/fedora-package-announce/2008-March/msg00069.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2008-March/msg00100.htmlnvd
News mentions
0No linked articles in our index yet.