CVE-2011-1941 json
phpMyAdmin Open Redirect in redirector
published 2012-01-26 14 y ago modified 2026-06-16 4 mo ago also GHSA-v6fw-xf2c-8q43 , EUVD-2022-5296
- cvss
- 4.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.9%
- EPSS 1.9% chance of exploitation in 30 days, percentile 79%
- public exploits
- 0
- none known
Summary
Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Patch / fix
- packagist phpmyadmin/phpmyadmin 3.4.1
- phpmyadmin Debian 14, Debian 13, Debian 12 4:3.4.1-1
debian advisories DEBIAN-CVE-2011-1941
Exploit prediction
1.88% chance of exploitation in the next 30 days, higher than 79% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| packagist | phpmyadmin/phpmyadmin | >=3.4.0, <3.4.1 |
3.4.1 |
Classification
References
-
github.com
/phpmyadmin/composer/commit/b7a8179eb6bf0f1643970ac57a70b5b513a1cd4f
web
-
github.com
/phpmyadmin/composer/commit/ecfc8ba4f7b4ea612c58ab5726054ed0f28e200d
web
-
phpmyadmin.net
/home_page/security/PMASA-2011-4.php
web, vendor-advisory
- phpmyadmin.git.sourceforge.net /git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=ecfc8ba4f7b4ea612c58ab5726054ed0f28e200d
- phpmyadmin.git.sourceforge.net /git/gitweb.cgi?p=phpmyadmin/phpmyadmin%3Ba=commitdiff%3Bh=b7a8179eb6bf0f1643970ac57a70b5b513a1cd4f
-
nvd.nist.gov
/vuln/detail/CVE-2011-1941
advisory
-
github.com
/phpmyadmin/composer
package
-
phpmyadmin.git.sourceforge.net
/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commitdiff;h=b7a8179eb6bf0f1643970ac57a70b5b513a1cd4f
web
-
phpmyadmin.git.sourceforge.net
/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commitdiff;h=ecfc8ba4f7b4ea612c58ab5726054ed0f28e200d
web
Sources
- CVE List CVE-2011-1941
- GitHub Advisory GHSA-v6fw-xf2c-8q43
- NVD CVE-2011-1941
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.