CVE-2009-4605

Published: Jan 19, 2010Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

scripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the (1) configuration and (2) v[0] parameters, which might allow remote attackers to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.

Affected (23)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 2.11.0
Phpmyadmin Phpmyadmin	Version 2.11.1.0
Phpmyadmin Phpmyadmin	Version 2.11.1.1
Phpmyadmin Phpmyadmin	Version 2.11.1.2
Phpmyadmin Phpmyadmin	Version 2.11.2.0
Phpmyadmin Phpmyadmin	Version 2.11.2.1
Phpmyadmin Phpmyadmin	Version 2.11.2.2
Phpmyadmin Phpmyadmin	Version 2.11.3.0
Phpmyadmin Phpmyadmin	Version 2.11.4.0
Phpmyadmin Phpmyadmin	Version 2.11.5.0
Phpmyadmin Phpmyadmin	Version 2.11.5.1
Phpmyadmin Phpmyadmin	Version 2.11.5.2
Phpmyadmin Phpmyadmin	Version 2.11.6.0
Phpmyadmin Phpmyadmin	Version 2.11.7.0
Phpmyadmin Phpmyadmin	Version 2.11.7.1
Phpmyadmin Phpmyadmin	Version 2.11.8.0
Phpmyadmin Phpmyadmin	Version 2.11.9.0
Phpmyadmin Phpmyadmin	Version 2.11.9.1
Phpmyadmin Phpmyadmin	Version 2.11.9.2
Phpmyadmin Phpmyadmin	Version 2.11.9.3
Phpmyadmin Phpmyadmin	Version 2.11.9.4
Phpmyadmin Phpmyadmin	Version 2.11.9.5
Phpmyadmin Phpmyadmin	Version 2.11.9.6