CVE-2011-4107

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

12.67% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 96.1% of scored records. A rank, not a probability.

NVD base score

6.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2011-11-17 19:00Z14 YR AGO

Last updated

2024-08-07 00:01Z2 YR AGO

Reserved

2011-10-18

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-611Improper Restriction of XML External Entity ReferenceBase

Data version

5.1

Document digest

74b2e220732ef8038fc3422f6da57e00ac72d7ee11a2bb72fa1c6f243bcf8b68

• exchange.xforce.ibmcloud.comphpmyadmin-xml-info-disclosure(71108)https://exchange.xforce.ibmcloud.com/vulnerabilities/71108vdb-entryx_refsource_XF
• secunia.com46447http://secunia.com/advisories/46447third-party-advisoryx_refsource_SECUNIA
• osvdb.org76798http://osvdb.org/76798vdb-entryx_refsource_OSVDB
• lists.fedoraproject.orgFEDORA-2011-15846http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069635.htmlvendor-advisoryx_refsource_FEDORA
• www.openwall.com[oss-security] 20111103 Re: CVE Request -- phpMyAdmin -- Arbitrary local file read flaw by loading XML strings / importing XML fileshttp://www.openwall.com/lists/oss-security/2011/11/03/5mailing-listx_refsource_MLIST
• seclists.org20111102 PhpMyAdmin Arbitrary File Readinghttp://seclists.org/fulldisclosure/2011/Nov/21mailing-listx_refsource_FULLDISC
• www.phpmyadmin.nethttp://www.phpmyadmin.net/home_page/security/PMASA-2011-17.phpx_refsource_CONFIRM
• www.debian.orgDSA-2391http://www.debian.org/security/2012/dsa-2391vendor-advisoryx_refsource_DEBIAN
• lists.fedoraproject.orgFEDORA-2011-15831http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069649.htmlvendor-advisoryx_refsource_FEDORA
• www.securityfocus.com50497http://www.securityfocus.com/bid/50497vdb-entryx_refsource_BID
• www.mandriva.comMDVSA-2011:198http://www.mandriva.com/security/advisories?name=MDVSA-2011:198vendor-advisoryx_refsource_MANDRIVA
• bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=751112x_refsource_MISC
• securityreason.com8533http://securityreason.com/securityalert/8533third-party-advisoryx_refsource_SREASON
• www.openwall.com[oss-security] 20111103 CVE Request -- phpMyAdmin -- Arbitrary local file read flaw by loading XML strings / importing XML fileshttp://www.openwall.com/lists/oss-security/2011/11/03/3mailing-listx_refsource_MLIST
• www.wooyun.orghttp://www.wooyun.org/bugs/wooyun-2010-03185x_refsource_MISC
• packetstormsecurity.orghttp://packetstormsecurity.org/files/view/106511/phpmyadmin-fileread.txtx_refsource_MISC
• lists.fedoraproject.orgFEDORA-2011-15841http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069625.htmlvendor-advisoryx_refsource_FEDORA