PH
Vendor
phpMyAdmin
270
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-25727 | PH Phpmyadmin Phpmyadmin | 5.4 | Feb 13 | In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface |
| CVE-2020-22452 | PH Phpmyadmin Phpmyadmin | 9.8 | Jan 26 | SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to… |
| CVE-2022-0813 | PH Phpmyadmin Phpmyadmin | 7.5 | Mar 10 | PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests |
| CVE-2022-23808 | PH Phpmyadmin Phpmyadmin | 6.1 | Jan 22 | An issue was discovered in phpMyAdmin 5.1 before 5.1.2 |
| CVE-2022-23807 | PH Phpmyadmin Phpmyadmin | 4.3 | Jan 22 | An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2 |
| CVE-2020-22278 | PH Phpmyadmin Phpmyadmin | 8.8 | Nov 4 | phpMyAdmin through 5.0.2 allows CSV injection via Export Section |
| CVE-2020-26935 | PH Phpmyadmin Phpmyadmin | 9.8 | Oct 10 | An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3 |
| CVE-2020-26934 | PH Phpmyadmin Phpmyadmin | 6.1 | Oct 10 | phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link |
| CVE-2020-11441 | PH Phpmyadmin Phpmyadmin | 6.1 | Mar 31 | phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page |
| CVE-2020-10803 | PH Phpmyadmin Phpmyadmin | 5.4 | Mar 22 | In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving… |
| CVE-2020-10802 | PH Phpmyadmin Phpmyadmin | 8.0 | Mar 22 | In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain… |
| CVE-2020-10804 | PH Phpmyadmin Phpmyadmin | 8.0 | Mar 22 | In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and… |
| CVE-2020-5504 | PH Phpmyadmin Phpmyadmin | 8.8 | Jan 9 | In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page |
| CVE-2019-19617 | PH Phpmyadmin Phpmyadmin | 9.8 | Dec 6 | phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php |
| CVE-2019-18622 | PH Phpmyadmin Phpmyadmin | 9.8 | Nov 22 | An issue was discovered in phpMyAdmin before 4.9.2 |
| CVE-2019-12922 | PH Phpmyadmin Phpmyadmin | 6.5 | Sep 13 | A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page |
| CVE-2019-12616 | PH Phpmyadmin Phpmyadmin | 6.5 | Jun 5 | An issue was discovered in phpMyAdmin before 4.9.0 |
| CVE-2019-11768 | PH Phpmyadmin Phpmyadmin | 9.8 | Jun 5 | An issue was discovered in phpMyAdmin before 4.9.0.1 |
| CVE-2019-6798 | PH Phpmyadmin Phpmyadmin | 9.8 | Jan 26 | An issue was discovered in phpMyAdmin before 4.8.5 |
| CVE-2019-6799 | PH Phpmyadmin Phpmyadmin | 5.9 | Jan 26 | An issue was discovered in phpMyAdmin before 4.8.5 |
| CVE-2018-19970 | PH Phpmyadmin Phpmyadmin | 6.1 | Dec 11 | In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name |
| CVE-2018-19969 | PH Phpmyadmin Phpmyadmin | 8.8 | Dec 11 | phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws |
| CVE-2018-19968 | PH Phpmyadmin Phpmyadmin | 6.5 | Dec 11 | An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature |
| CVE-2018-15605 | PH Phpmyadmin Phpmyadmin | 6.1 | Aug 24 | An issue was discovered in phpMyAdmin before 4.8.3 |
| CVE-2018-12613 | PH Phpmyadmin Phpmyadmin | 8.8 | Jun 21 | An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server |
| CVE-2018-12581 | PH Phpmyadmin Phpmyadmin | 6.1 | Jun 21 | An issue was discovered in js/designer/move.js in phpMyAdmin before 4.8.2 |
| CVE-2017-18264 | PH Phpmyadmin Phpmyadmin | 9.8 | May 1 | An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases |
| CVE-2018-10188 | PH Phpmyadmin Phpmyadmin | 8.8 | Apr 19 | phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js,… |
| CVE-2018-7260 | PH Phpmyadmin Phpmyadmin | 5.4 | Feb 21 | Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a… |
| CVE-2017-1000499 | PH Phpmyadmin Phpmyadmin | 8.8 | Jan 3 | phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness |
| CVE-2017-1000018 | PH Phpmyadmin Phpmyadmin | 7.5 | Jul 17 | phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name |
| CVE-2017-1000017 | PH Phpmyadmin Phpmyadmin | 8.8 | Jul 17 | phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server |
| CVE-2017-1000016 | PH Phpmyadmin Phpmyadmin | 7.5 | Jul 17 | A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies |
| CVE-2017-1000015 | PH Phpmyadmin Phpmyadmin | 6.1 | Jul 17 | phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters |
| CVE-2017-1000014 | PH Phpmyadmin Phpmyadmin | 7.5 | Jul 17 | phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality |
| CVE-2017-1000013 | PH Phpmyadmin Phpmyadmin | 6.1 | Jul 17 | phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness |
| CVE-2016-6621 | PH Phpmyadmin Phpmyadmin | 8.6 | Jan 31 | The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via… |
| CVE-2016-9866 | PH Phpmyadmin Phpmyadmin | 9.8 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9865 | PH Phpmyadmin Phpmyadmin | 9.8 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9864 | PH Phpmyadmin Phpmyadmin | 7.5 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9863 | PH Phpmyadmin Phpmyadmin | 7.5 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9862 | PH Phpmyadmin Phpmyadmin | 7.5 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9861 | PH Phpmyadmin Phpmyadmin | 7.5 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9860 | PH Phpmyadmin Phpmyadmin | 5.9 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9859 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9858 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9857 | PH Phpmyadmin Phpmyadmin | 6.1 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9856 | PH Phpmyadmin Phpmyadmin | 6.1 | Dec 11 | An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10 |
| CVE-2016-9855 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9854 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9853 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9852 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9851 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9850 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9849 | PH Phpmyadmin Phpmyadmin | 9.8 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9848 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-9847 | PH Phpmyadmin Phpmyadmin | 5.3 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-6633 | PH Phpmyadmin Phpmyadmin | 8.1 | Dec 11 | An issue was discovered in phpMyAdmin |
| CVE-2016-6632 | PH Phpmyadmin Phpmyadmin | 5.9 | Dec 11 | An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files |
| CVE-2016-6631 | PH Phpmyadmin Phpmyadmin | 7.5 | Dec 11 | An issue was discovered in phpMyAdmin |