PH
Product
phpMyAdmin
On CISA KEVExploited in the wild
270
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 30Medium 73Low 1
Watch
Add phpMyAdmin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9858 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more |
| CVE-2016-9855 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +27 more |
| CVE-2016-9854 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +27 more |
| CVE-2016-9853 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +27 more |
| CVE-2016-9852 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.4.0; +27 more |
| CVE-2016-9851 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +27 more |
| CVE-2016-9850 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.4.0; +34 more |
| CVE-2016-9848 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more |
| CVE-2016-9847 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.0.0; +34 more |
| CVE-2016-6627 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more |
| CVE-2016-6613 | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more |
| CVE-2016-5098 | 5.3 | Jul 5 | Directory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2-prerelease allows remote attackers to determine the existence of arbitrary files by… Affected: 4.6.2 |
| CVE-2016-5097 | 5.3 | Jul 5 | phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive… Affected: through 4.6.1 |
| CVE-2016-5730 | 5.3 | Jul 3 | phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more |
| CVE-2016-2044 | 5.3 | Feb 20 | libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals… Affected: 4.5.0; 4.5.0.1; 4.5.0.2; 4.5.1; 4.5.2; 4.5.3 |
| CVE-2016-2042 | 5.3 | Feb 20 | phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to (1) libraries/phpseclib/Crypt/AES.php or… Affected: 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; 4.4.5; +21 more |
| CVE-2016-2039 | 5.3 | Feb 20 | libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.10; 4.0.10.1; +34 more |
| CVE-2016-2038 | 5.3 | Feb 20 | phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.10; 4.0.10.1; +34 more |
| CVE-2015-8669 | 5.3 | Dec 26 | libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more |
| CVE-2016-4412 | 4.4 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +22 more |
| CVE-2022-23807 | 4.3 | Jan 22 | An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2 Affected: 4.9.0 before 4.9.8; 5.1.0 before 5.1.2 |
| CVE-2016-6625 | 4.3 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more |
| CVE-2016-6610 | 4.3 | Dec 11 | A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on… Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more |