PH
Product
phpMyAdmin
On CISA KEVExploited in the wild
270
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 30Medium 73Low 1
Watch
Add phpMyAdmin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1151 In wildKEV | 9.8 | Mar 26 | phpMyAdmin Remote Code Execution Vulnerability Affected: 2.11.0 before 2.11.9.5; 3.0.0 before 3.1.3.1 |
| CVE-2020-22452 | 9.8 | Jan 26 | SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to… Affected: 5.0.0 before 5.2.0 |
| CVE-2020-26935 | 9.8 | Oct 10 | An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3 Affected: 4.9.0 before 4.9.6; 5.0.0 before 5.0.3 |
| CVE-2019-19617 | 9.8 | Dec 6 | phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php Affected: before 4.9.2 |
| CVE-2019-18622 | 9.8 | Nov 22 | An issue was discovered in phpMyAdmin before 4.9.2 Affected: before 4.9.2 |
| CVE-2019-11768 | 9.8 | Jun 5 | An issue was discovered in phpMyAdmin before 4.9.0.1 Affected: before 4.9.0.1 |
| CVE-2019-6798 | 9.8 | Jan 26 | An issue was discovered in phpMyAdmin before 4.8.5 Affected: 4.5.0 through 4.8.4 |
| CVE-2017-18264 | 9.8 | May 1 | An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases Affected: 4.0.0 before 4.0.10.20; 4.4.0 through 4.4.15.10; 4.6.0 through 4.6.6; 4.7.0; 4.7.0 |
| CVE-2016-9866 | 9.8 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.4.0; +34 more |
| CVE-2016-9865 | 9.8 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more |
| CVE-2016-9849 | 9.8 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more |
| CVE-2016-6629 | 9.8 | Dec 11 | An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.0.0; 4.0.1; +34 more |
| CVE-2016-6620 | 9.8 | Dec 11 | An issue was discovered in phpMyAdmin Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.0.0; 4.0.1; +34 more |
| CVE-2016-5734 | 9.8 | Jul 3 | phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka eval) modifier,… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more |
| CVE-2016-5703 | 9.8 | Jul 3 | SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL… Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +25 more |
Showing 15