CVE-2011-2718
phpMyAdmin Directory Traversal Vulnerability
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
Exploit likelihood
What each source reports
NVD Score used
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
- Record
CVE-2011-2718- CVSS 2.0
- 6.0 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
- Record
CVE-2011-2718- Updated
- 2026-11-02
EUVDEUVD-2022-5801 No score
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
- Record
EUVD-2022-5801- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xhqq-554j-p4x8 No score
phpMyAdmin Directory Traversal Vulnerability
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
- Record
GHSA-xhqq-554j-p4x8- Weakness
- CWE-22
- Updated
- 2026-11-02
OSV No score
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
- Record
CVE-2011-2718- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2718 No score
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
- Record
DEBIAN-CVE-2011-2718- Updated
- 2026-11-02
OSVGHSA-xhqq-554j-p4x8 No score
phpMyAdmin Directory Traversal Vulnerability
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to (1) libraries/schema/User_Schema.class.php and (2) schema_export.php.
- Record
GHSA-xhqq-554j-p4x8- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpmyadmin/phpmyadminPackagist |
3.4 up to 3.4.3.2 | 3.4.3.2 |
phpmyadminDebian:12 |
before 4:3.4.3.2-1 | 4:3.4.3.2-1 |
phpmyadminDebian:13 |
before 4:3.4.3.2-1 | 4:3.4.3.2-1 |
phpmyadminDebian:14 |
before 4:3.4.3.2-1 | 4:3.4.3.2-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2718 is a medium vulnerability (CVSS 6.0) in Phpmyadmin, published August 1, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 77th percentile. Fixed in phpmyadmin/phpmyadmin 3.4.3.2.
References
secunia.com/advisories/45515
osvdb.org/74111
securityfocus.com/bid/48874
phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commit%3Bh=3ae58f0cd6b89ad4767920f9b214c38d3f6d4393
mandriva.com/security/advisories?name=MDVSA-2011:124
Show 15 moreShow less
openwall.com/lists/oss-security/2011/07/26/10
bugzilla.redhat.com/show_bug.cgi?id=725383
phpmyadmin.net/home_page/security/PMASA-2011-11.php
lists.fedoraproject.org/pipermail/package-announce/2011-August/063410.html
exchange.xforce.ibmcloud.com/vulnerabilities/68768
nvd.nist.gov/vuln/detail/CVE-2011-2718
github.com/phpmyadmin/phpmyadmin/commit/3ae58f0cd6b89ad4767920f9b214c38d3f6d4393
web.archive.org/web/20120111084137/http://www.securityfocus.com/bid/48874
security-tracker.debian.org/tracker/CVE-2011-2718