Login Request a demo
PH
Product
phpMyAdmin
by phpMyAdmin · last CVE Feb 13, 2023
On CISA KEVExploited in the wild
270
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities270In the news0Timeline
Severity mix
Critical 15High 30Medium 73Low 1
Severity
All severities270Critical15High30Medium73Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add phpMyAdmin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2009-1151
In wildKEV
9.8
97%
Mar 26
phpMyAdmin Remote Code Execution Vulnerability
Affected: 2.11.0 before 2.11.9.5; 3.0.0 before 3.1.3.1
CVE-2020-22452
9.8
2%
Jan 26
SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to…
Affected: 5.0.0 before 5.2.0
CVE-2020-26935
9.8
66%
Oct 10
An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3
Affected: 4.9.0 before 4.9.6; 5.0.0 before 5.0.3
CVE-2019-19617
9.8
2%
Dec 6
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php
Affected: before 4.9.2
CVE-2019-18622
9.8
2%
Nov 22
An issue was discovered in phpMyAdmin before 4.9.2
Affected: before 4.9.2
CVE-2019-11768
9.8
4%
Jun 5
An issue was discovered in phpMyAdmin before 4.9.0.1
Affected: before 4.9.0.1
CVE-2019-6798
9.8
4%
Jan 26
An issue was discovered in phpMyAdmin before 4.8.5
Affected: 4.5.0 through 4.8.4
CVE-2017-18264
9.8
3%
May 1
An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases
Affected: 4.0.0 before 4.0.10.20; 4.4.0 through 4.4.15.10; 4.6.0 through 4.6.6; 4.7.0; 4.7.0
CVE-2016-9866
9.8
1%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.4.0; +34 more
CVE-2016-9865
9.8
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more
CVE-2016-9849
9.8
3%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more
CVE-2016-6629
9.8
3%
Dec 11
An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.0.0; 4.0.1; +34 more
CVE-2016-6620
9.8
3%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.0.0; 4.0.1; +34 more
CVE-2016-5734
9.8
81%
Jul 3
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier,…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more
CVE-2016-5703
9.8
2%
Jul 3
SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL…
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +25 more
CVE-2020-22278
8.8
2%
Nov 4
phpMyAdmin through 5.0.2 allows CSV injection via Export Section
Affected: through 5.0.2
CVE-2020-5504
8.8
39%
Jan 9
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page
Affected: 4.0.0 before 4.9.4; 5.0.0 before 5.0.1
CVE-2018-19969
8.8
1%
Dec 11
phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws
Affected: 4.7.0 through 4.7.6; 4.8.0 before 4.8.4
CVE-2018-12613
8.8
98%
Jun 21
An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server
Affected: 4.8.0 before 4.8.2
CVE-2018-10188
8.8
4%
Apr 19
phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js,…
Affected: 4.8.0
CVE-2017-1000499
8.8
8%
Jan 3
phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness
Affected: 4.7.0 before 4.7.7
CVE-2017-1000017
8.8
1%
Jul 17
phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server
Affected: 4.0.0 before 4.0.10.19; 4.4.0 through 4.4.15.10; 4.6.0 through 4.6.6
CVE-2016-6619
8.8
1%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-6609
8.8
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-6621
8.6
2%
Jan 31
The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via…
Affected: through 4.0.10.18; 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; +30 more
CVE-2016-6633
8.1
4%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more
CVE-2016-6617
8.1
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3
CVE-2016-6611
8.1
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; +34 more
CVE-2016-6606
8.1
1%
Dec 11
An issue was discovered in cookie encryption in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2020-10802
8.0
2%
Mar 22
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain…
Affected: 4.0.0 before 4.9.5; 5.0.0 before 5.0.2
CVE-2020-10804
8.0
2%
Mar 22
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and…
Affected: 4.0.0 before 4.9.5; 5.0.0 before 5.0.2
CVE-2022-0813
7.5
1%
Mar 10
PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests
Affected: through 5.1.1
CVE-2017-1000018
7.5
2%
Jul 17
phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name
Affected: 4.0.0 before 4.0.10.19; 4.4.0 before 4.4.15.10; 4.6.0 before 4.6.6
CVE-2017-1000016
7.5
1%
Jul 17
A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.6.5; +2 more
CVE-2017-1000014
7.5
2%
Jul 17
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; +34 more
CVE-2016-9864
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.4.0; +34 more
CVE-2016-9863
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4
CVE-2016-9862
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4
CVE-2016-9861
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-6631
7.5
5%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-6616
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +27 more
CVE-2016-5739
7.5
3%
Jul 3
The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP)…
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-5706
7.5
3%
Jul 3
js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in…
Affected: 4.6.0; 4.6.0; 4.6.0; 4.6.0; 4.6.1; 4.6.2; +34 more
CVE-2016-2041
7.5
3%
Feb 20
libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens,…
Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.10; 4.0.10.1; +34 more
CVE-2016-1927
7.5
3%
Feb 20
The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function,…
Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.10; 4.0.10.1; +34 more
CVE-2016-6614
6.8
2%
Dec 11
An issue was discovered in phpMyAdmin involving the %u username replacement functionality of the SaveDir and UploadDir features
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.0.0; 4.0.1; +34 more
CVE-2016-2562
6.8
1%
Mar 1
The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows…
Affected: 4.5.0; 4.5.0; 4.5.0; 4.5.0; 4.5.0.1; 4.5.0.2; +7 more
CVE-2019-12922
6.5
11%
Sep 13
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page
Affected: through 4.9.0.1
CVE-2019-12616
6.5
20%
Jun 5
An issue was discovered in phpMyAdmin before 4.9.0
Affected: before 4.9.0
CVE-2018-19968
6.5
3%
Dec 11
An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature
Affected: 4.0.0 before 4.8.4
Page 1 of 6 · 270 total
12…6