Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2011-2506

🗓️ 14 Jul 2011 23:00:00Reported by redhatType 
cve
 cve🔗 web.nvd.nist.gov👁 166 Views🌐 WEB

phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 code injection vulnerabilit

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today		phpMyAdmin 3.x Swekey Remote Code Injection Exploit
9 Jul 201100:00
–zdt
Tenable Nessus		phpMyAdmin 3.3.x < 3.3.10.2 / 3.4.x < 3.4.3.1 Multiple Vulnerabilities
14 Jul 201100:00
–nessus
Tenable Nessus		Debian DSA-2286-1 : phpmyadmin - several vulnerabilities
28 Jul 201100:00
–nessus
Tenable Nessus		Fedora 14 : phpMyAdmin-3.4.3.1-1.fc14 (2011-9144)
18 Jul 201100:00
–nessus
Tenable Nessus		FreeBSD : phpmyadmin -- multiple vulnerabilities (7e4e5c53-a56c-11e0-b180-00216aa06fc2)
5 Jul 201100:00
–nessus
Tenable Nessus		GLSA-201201-01 : phpMyAdmin: Multiple vulnerabilities
5 Jan 201200:00
–nessus
Tenable Nessus		phpMyAdmin 3.3.x / 3.4.x < 3.3.10.2 / 3.4.3.1 Multiple Vulnerabilities (PMASA-2011-5 - PMASA-2011-8)
20 Dec 201100:00
–nessus
FreeBSD		phpmyadmin -- multiple vulnerabilities
2 Jul 201100:00
–freebsd
Circl		CVE-2011-2506
8 Jul 201100:00
–circl
Check Point Advisories		PhpMyAdmin Sweky Remote Code Injection Exploit (CVE-2011-2506)
20 Oct 201300:00
–checkpoint_advisories
Rows per page
NVD
Node
phpmyadminphpmyadminMatch3.0.0
OR
phpmyadminphpmyadminMatch3.0.0alpha
OR
phpmyadminphpmyadminMatch3.0.0beta
OR
phpmyadminphpmyadminMatch3.0.0rc1
OR
phpmyadminphpmyadminMatch3.0.1
OR
phpmyadminphpmyadminMatch3.0.1rc1
OR
phpmyadminphpmyadminMatch3.0.1.1
OR
phpmyadminphpmyadminMatch3.1.0
OR
phpmyadminphpmyadminMatch3.1.0beta1
OR
phpmyadminphpmyadminMatch3.1.1
OR
phpmyadminphpmyadminMatch3.1.1rc1
OR
phpmyadminphpmyadminMatch3.1.2
OR
phpmyadminphpmyadminMatch3.1.2rc1
OR
phpmyadminphpmyadminMatch3.1.3
OR
phpmyadminphpmyadminMatch3.1.3rc1
OR
phpmyadminphpmyadminMatch3.1.3.1
OR
phpmyadminphpmyadminMatch3.1.3.2
OR
phpmyadminphpmyadminMatch3.1.4
OR
phpmyadminphpmyadminMatch3.1.4rc2
OR
phpmyadminphpmyadminMatch3.1.5
OR
phpmyadminphpmyadminMatch3.1.5rc1
OR
phpmyadminphpmyadminMatch3.2.0
OR
phpmyadminphpmyadminMatch3.2.0beta1
OR
phpmyadminphpmyadminMatch3.2.0rc1
OR
phpmyadminphpmyadminMatch3.2.1
OR
phpmyadminphpmyadminMatch3.2.1rc1
OR
phpmyadminphpmyadminMatch3.2.2
OR
phpmyadminphpmyadminMatch3.2.2rc1
OR
phpmyadminphpmyadminMatch3.3.0.0
OR
phpmyadminphpmyadminMatch3.3.1.0
OR
phpmyadminphpmyadminMatch3.3.2.0
OR
phpmyadminphpmyadminMatch3.3.3.0
OR
phpmyadminphpmyadminMatch3.3.4.0
OR
phpmyadminphpmyadminMatch3.3.5.0
OR
phpmyadminphpmyadminMatch3.3.5.1
OR
phpmyadminphpmyadminMatch3.3.6
OR
phpmyadminphpmyadminMatch3.3.7
OR
phpmyadminphpmyadminMatch3.3.8
OR
phpmyadminphpmyadminMatch3.3.8.1
OR
phpmyadminphpmyadminMatch3.3.9.0
OR
phpmyadminphpmyadminMatch3.3.9.1
OR
phpmyadminphpmyadminMatch3.3.9.2
OR
phpmyadminphpmyadminMatch3.3.10.0
OR
phpmyadminphpmyadminMatch3.3.10.1
Node
phpmyadminphpmyadminMatch3.4.0.0
OR
phpmyadminphpmyadminMatch3.4.1.0
OR
phpmyadminphpmyadminMatch3.4.2.0
OR
phpmyadminphpmyadminMatch3.4.3.0
ParameterPositionPathDescriptionCWE
_SESSION[ConfigFile0][Servers][*/eval(getenv('HTTP_CODE'));/*][host]query paramsetup/index.phpRemote Static Code Injection via manipulation of _SESSION during token retrieval and session handling (CVE-2011-2506)CWE-94
_SESSION[ConfigFile][Servers][*/eval(getenv('HTTP_CODE'));/*][host]query paramsetup/index.phpRemote Static Code Injection via manipulation of _SESSION during token retrieval and session handling (CVE-2011-2506)CWE-94
session_to_unsetquery paramsetup/index.phpRemote Static Code Injection via manipulation of _SESSION during token retrieval and session handling (CVE-2011-2506)CWE-94
tokenquery paramsetup/index.phpRemote Static Code Injection via manipulation of _SESSION during token retrieval and session handling (CVE-2011-2506)CWE-94
session_to_unsetquery paramlibraries/auth/swekey/swekey.auth.lib.phpRemote Static Code Injection by injecting into _SESSION through swekey.auth.lib.php as part of phpMyAdmin 3.x vulnerabilities (CVE-2011-2506)CWE-94
_SESSION[ConfigFile0][Servers][*/eval(getenv('HTTP_CODE'));/*][host]query paramlibraries/auth/swekey/swekey.auth.lib.phpRemote Static Code Injection by injecting into _SESSION through swekey.auth.lib.php as part of phpMyAdmin 3.x vulnerabilities (CVE-2011-2506)CWE-94
_SESSION[ConfigFile][Servers][*/eval(getenv('HTTP_CODE'));/*][host]query paramlibraries/auth/swekey/swekey.auth.lib.phpRemote Static Code Injection by injecting into _SESSION through swekey.auth.lib.php as part of phpMyAdmin 3.x vulnerabilities (CVE-2011-2506)CWE-94
tokenquery paramlibraries/auth/swekey/swekey.auth.lib.phpRemote Static Code Injection by injecting into _SESSION through swekey.auth.lib.php as part of phpMyAdmin 3.x vulnerabilities (CVE-2011-2506)CWE-94
evalquery paramconfig/config.inc.phpAuthenticated remote code execution via evaluating php code passed in eval parameter after injection sequenceCWE-94
tokenrequest bodysetup/config.phpSave injected PHP into config file via setup/config.php after SESSION[-] manipulation (CVE-2011-2506)CWE-94
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 23:31Current
6.5Medium risk
Vulners AI Score6.5
CVSS 27.5
EPSS0.09626
CWE-94
cve-2011-2506code injectionphpmyadminsecurity vulnerability
166