CVE-2009-2284

Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.

• CWE-79

• http://secunia.com/advisories/35649Vendor Advisory
• http://secunia.com/advisories/35715Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:192
• http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.phpPatch, Vendor Advisory
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html
• http://secunia.com/advisories/35649Vendor Advisory
• http://secunia.com/advisories/35715Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:192
• http://www.phpmyadmin.net/home_page/security/PMASA-2009-5.phpPatch, Vendor Advisory
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00150.html
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00152.html
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00256.html

Published

Jul 1, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2275Directory traversal vulnerability in frontend/x3/stats/lastv…
• CVE-2009-2276SQL injection vulnerability in voteforus.php in the Vote For…
• CVE-2009-2277Cross-site scripting (XSS) vulnerability in WebAccess in VMw…
• CVE-2009-2281Multiple heap-based buffer underflows in the readPostBody fu…
• CVE-2009-2282The Virtual Network Terminal Server daemon (vntsd) for Logic…
• CVE-2009-2283Multiple cross-site scripting (XSS) vulnerabilities in the h…
• CVE-2009-2285Buffer underflow in the LZWDecodeCompat function in libtiff …
• CVE-2009-2286Buffer overflow in compface 1.5.2 and earlier allows user-as…
• CVE-2009-2287The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Lin…
• CVE-2009-2288statuswml.cgi in Nagios before 3.1.1 allows remote attackers…
• CVE-2009-2289Cross-site scripting (XSS) vulnerability in index.php in Arc…
• CVE-2009-2290SQL injection vulnerability in the Boy Scout Advancement (co…