Skip to contentPhpmyadmin vulnerabilities
Newest
- phpmyadminphpMyAdmin Cross-site Scripting vulnerabilityCVE-2010-2958Fix available4.3 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x...CVE-2010-3056Fix available4.3 Medium
- phpmyadminThe configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does...CVE-2010-3055Fix availableEPSS 14.8%7.5 High
- phpmyadminscripts/setup.php (aka the setup script) in phpMyAdmin 2.11.x before 2.11.10 calls the...CVE-2009-4605Fix available5.0 Medium
- phpmyadminphpMyAdmin unsafely handles temporary filesCVE-2008-7252Fix available10.0 High
- phpmyadminlibraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with...CVE-2008-7251Fix available10.0 High
- phpmyadminSQL injection vulnerability in the PDF schema generator functionality in phpMyAdmin 2.11.x before...CVE-2009-3697Fix available7.5 High
- phpmyadminphpMyAdmin Cross-site Scripting In MySQL Table NameCVE-2009-3696Fix available4.3 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to...CVE-2009-2284Fix available4.3 Medium
- phpmyadminStatic code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class...CVE-2009-1285Public exploitFix availableEPSS 10.9%7.5 High
- phpmyadmin, debian linux +1 moreStatic code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x...CVE-2009-1151In KEVPublic exploitFix availableEPSS 96.6%9.8 Critical
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php)...CVE-2009-1150Fix available4.3 Medium
- phpmyadminphpMyAdmin HTTP Response Splitting VulnerabilityCVE-2009-1149Fix available7.5 High
- phpmyadminDirectory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in...CVE-2009-1148Fix available5.0 Medium
- phpmyadminCross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x...CVE-2008-5621Public exploitFix available6.0 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other...CVE-2008-4775Public exploitFix available2.6 Low
- phpmyadminThe PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2,...CVE-2008-4326Fix available4.3 Medium
- phpmyadminlibraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated...CVE-2008-4096Public exploitFix availableEPSS 11.2%8.5 High
- phpmyadminCross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user...CVE-2008-3457Fix available2.6 Low
- phpmyadminphpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to...CVE-2008-3456Fix available6.4 Medium
- phpmyadminCross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote...CVE-2008-3197Fix available3.5 Low
- phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin before 2.11.7, when register_globals is...CVE-2008-2960Fix available2.6 Low
- phpmyadminUnspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows...CVE-2008-1924Fix available3.5 Low
- phpmyadmin, debian linux, fedoraproject fedora +1 more +3 morephpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish...CVE-2008-1567Fix available5.5 Medium
- phpmyadminphpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST...CVE-2008-1149Fix available5.1 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin...CVE-2007-6100Fix available2.6 Low
- phpmyadminCross-site scripting (XSS) vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows...CVE-2007-5977Fix available3.5 Low
- phpmyadminSQL injection vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote...CVE-2007-5976Fix available6.5 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote...CVE-2007-5589Public exploitFix available4.3 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed...CVE-2007-5386Public exploitFix available4.3 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers...CVE-2007-43064.3 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote...CVE-2007-2245Fix available6.8 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote...CVE-2007-2016Fix available4.3 Medium
- phpmyadminIncomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote...CVE-2007-1395Fix available4.3 Medium
- phpmyadminThe PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2...CVE-2007-1325Fix available7.1 High
- phpmyadminphpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP...CVE-2006-6944Fix available7.5 High
- phpmyadminPhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct...CVE-2006-6943Public exploitFix available5.0 Medium
- phpmyadmin, debian linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote...CVE-2006-6942Public exploitFix available6.8 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet...CVE-2007-0341Fix available6.8 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.9.2-rc1 allow remote...CVE-2007-0204Fix available6.8 Medium
- phpmyadminMultiple unspecified vulnerabilities in phpMyAdmin before 2.9.2-rc1 have unknown impact and...CVE-2007-0203Fix available10.0 High
- phpmyadminphpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request...CVE-2007-0095Fix available5.0 Medium
- phpmyadminMultiple CRLF injection vulnerabilities in PhpMyAdmin 2.7.0-pl2 allow remote attackers to inject...CVE-2006-63747.5 High
- phpmyadminPhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensitive information via a direct request...CVE-2006-6373Fix available5.0 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows...CVE-2006-5718Fix available4.3 Medium
- phpmyadminphpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with...CVE-2006-5117Fix available5.0 Medium
- phpmyadminMultiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow...CVE-2006-5116Fix available5.1 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to...CVE-2006-3388Fix available5.8 Medium
- phpmyadminCross-site scripting (XSS) vulnerabilities in certain versions of phpMyAdmin before 2.8.0.4 allow...CVE-2006-2418Fix available6.8 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote...CVE-2006-2417Fix available4.3 Medium
- Show moreLoading…