CVE-2009-1285: phpMyAdmin

High severity, CVSS 7.5. EPSS: 10.9% chance of exploitation in the next 30 days.

Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files.

Affected products

• phpMyAdmin phpMyAdmin: version 3.0.0 only; version 3.0.1 only; version 3.1.0 only; version 3.1.0.0 only; version 3.1.1 only; version 3.1.2 only; …

Published 2009-04-16. Last modified 2026-06-16.