Login Request a demo
PH
Product
phpMyAdmin
by phpMyAdmin · last CVE Feb 13, 2023
On CISA KEVExploited in the wild
270
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities270In the news0Timeline
Severity mix
Critical 15High 30Medium 73Low 1
Severity
All severities270Critical15High30Medium73Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add phpMyAdmin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-22278
8.8
2%
Nov 4
phpMyAdmin through 5.0.2 allows CSV injection via Export Section
Affected: through 5.0.2
CVE-2020-5504
8.8
39%
Jan 9
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page
Affected: 4.0.0 before 4.9.4; 5.0.0 before 5.0.1
CVE-2018-19969
8.8
1%
Dec 11
phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws
Affected: 4.7.0 through 4.7.6; 4.8.0 before 4.8.4
CVE-2018-12613
8.8
98%
Jun 21
An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server
Affected: 4.8.0 before 4.8.2
CVE-2018-10188
8.8
4%
Apr 19
phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js,…
Affected: 4.8.0
CVE-2017-1000499
8.8
8%
Jan 3
phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness
Affected: 4.7.0 before 4.7.7
CVE-2017-1000017
8.8
1%
Jul 17
phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server
Affected: 4.0.0 before 4.0.10.19; 4.4.0 through 4.4.15.10; 4.6.0 through 4.6.6
CVE-2016-6619
8.8
1%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-6609
8.8
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-6621
8.6
2%
Jan 31
The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via…
Affected: through 4.0.10.18; 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; +30 more
CVE-2016-6633
8.1
4%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.4.1; +34 more
CVE-2016-6617
8.1
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3
CVE-2016-6611
8.1
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; +34 more
CVE-2016-6606
8.1
1%
Dec 11
An issue was discovered in cookie encryption in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2020-10802
8.0
2%
Mar 22
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain…
Affected: 4.0.0 before 4.9.5; 5.0.0 before 5.0.2
CVE-2020-10804
8.0
2%
Mar 22
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and…
Affected: 4.0.0 before 4.9.5; 5.0.0 before 5.0.2
CVE-2022-0813
7.5
1%
Mar 10
PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests
Affected: through 5.1.1
CVE-2017-1000018
7.5
2%
Jul 17
phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name
Affected: 4.0.0 before 4.0.10.19; 4.4.0 before 4.4.15.10; 4.6.0 before 4.6.6
CVE-2017-1000016
7.5
1%
Jul 17
A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.6.5; +2 more
CVE-2017-1000014
7.5
2%
Jul 17
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; +34 more
CVE-2016-9864
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4; 4.4.0; +34 more
CVE-2016-9863
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4
CVE-2016-9862
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.3; 4.6.4
CVE-2016-9861
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-6631
7.5
5%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-6616
7.5
2%
Dec 11
An issue was discovered in phpMyAdmin
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +27 more
CVE-2016-5739
7.5
3%
Jul 3
The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP)…
Affected: 4.4.0; 4.4.1; 4.4.1.1; 4.4.2; 4.4.3; 4.4.4; +34 more
CVE-2016-5706
7.5
3%
Jul 3
js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in…
Affected: 4.6.0; 4.6.0; 4.6.0; 4.6.0; 4.6.1; 4.6.2; +34 more
CVE-2016-2041
7.5
3%
Feb 20
libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens,…
Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.10; 4.0.10.1; +34 more
CVE-2016-1927
7.5
3%
Feb 20
The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function,…
Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.1; 4.0.10; 4.0.10.1; +34 more
Showing 30