Vulnerability Database

315,050

Total vulnerabilities in the database

CVE-2009-1149

CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters.

  • Published: Mar 26, 2009
  • Updated: Nov 9, 2025
  • CVE: CVE-2009-1149
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
Composer icon phpmyadmin / phpmyadmin 3.1.2 3.1.2.x
Composer icon phpmyadmin / phpmyadmin 3.1.0 3.1.0.x
Composer icon phpmyadmin / phpmyadmin 3.1.1-rc1 3.1.1-rc1.x
Composer icon phpmyadmin / phpmyadmin 3.1.1 3.1.1.x
Composer icon phpmyadmin / phpmyadmin 3.1.3-rc1 3.1.3-rc1.x
Composer icon phpmyadmin / phpmyadmin 3.1.0.0 3.1.0.0.x
Composer icon phpmyadmin / phpmyadmin 3.1.2-rc1 3.1.2-rc1.x
Composer icon phpmyadmin / phpmyadmin - 3.1.3.x