CVE-2009-1151CISA KEVEPSS p99.9%

CVE-2009-1151phpMyAdmin Remote Code Execution Vulnerability

phpMyAdmin / phpMyAdmin

Description

Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.

Scoring

EPSS95.44% probability of exploitation · percentile 99.9% · 2026-06-18T12:00:27Z

CISA KEV entry

Added to KEV: 2022-03-25

(incoming)1

TypeTargetConfidenceTier
KEVEntryphpMyAdmin Remote Code Execution Vulnerabilitykev-cve-2009-11510%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
CVE
vBulletin PHP Module Remote Code Execution Vulnerability
CVE
rConfig OS Command Injection Vulnerability
CVE
WordPress File Manager Plugin Remote Code Execution Vulnerability
CVE
CVE-2025-15405
CVE
PHP-CGI Query String Parameter Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.