CVE-2008-4775: phpMyAdmin

Low severity, CVSS 2.6. EPSS: 6.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11.9.2 and 3.0.1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the db parameter, a different vector than CVE-2006-6942 and CVE-2007-5977.

Affected products

• phpMyAdmin phpMyAdmin: version 2.11.9.2 only; version 3.0.0 only; version 3.0.1 only

Published 2008-10-28. Last modified 2026-06-16.