CVE-2009-2284

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-07-01 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.

Affected products

phpMyAdmin: through 3.2.0; 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4 (+169)

References

http://secunia.com/advisories/35649
http://secunia.com/advisories/35715
http://www.mandriva.com/security/advisories?name=MDVSA-2009:192
http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html
http://secunia.com/advisories/35649
http://secunia.com/advisories/35715
http://www.mandriva.com/security/advisories?name=MDVSA-2009:192
http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.php
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html

Get alerted when CVE-2009-2284 or the next vulnerability affects your stack