CVE-2011-3181

Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x...

4.3 MediumFix available

CVE-2011-3181 is a medium vulnerability (CVSS 4.3) in Phpmyadmin, published August 29, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. Fixed in phpmyadmin 4:3.4.4-1.

Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML via a (1) table name, (2) column name, or (3) index name.

Exploit likelihood

2.33%Up 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2011-3181
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-3181
Updated: 2026-11-02

EUVDEUVD-2011-3148 No score

Record: EUVD-2011-3148
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q64c-8ph3-645m No score

Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x...

Record: GHSA-q64c-8ph3-645m
Weakness: CWE-79
Updated: 2026-11-02

OSV No score

Record: CVE-2011-3181
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-3181 No score

Record: DEBIAN-CVE-2011-3181
Updated: 2026-11-02

Affected products

phpmyadmin

Affected packages

Affected packages
Package	Affected	Fixed
`phpmyadmin` Debian:12	before 4:3.4.4-1	4:3.4.4-1
`phpmyadmin` Debian:13	before 4:3.4.4-1	4:3.4.4-1
`phpmyadmin` Debian:14	before 4:3.4.4-1	4:3.4.4-1
`phpmyadmin` Debian:6.0	before 4:3.3.7-7, plus listed versions 4:3.3.7-34:3.3.7-54:3.3.7-6	4:3.3.7-7

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 7 moreShow less