Skip to contentPhpmyadmin vulnerabilities
Newest
- phpmyadminAn issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject...CVE-2016-9862Fix available7.5 High
- phpmyadminAn issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used...CVE-2016-6617Fix available8.1 High
- phpmyadminphpMyAdmin Cross-site Scripting (XSS)CVE-2016-6608Fix available6.1 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to...CVE-2016-4412Fix available4.4 Medium
- phpmyadminphpMyAdmin CSRF VulnerabilityCVE-2016-9866Fix available9.8 Critical
- phpmyadminAn issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible...CVE-2016-9865Fix available9.8 Critical
- phpmyadminAn issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible...CVE-2016-9864Fix available7.5 High
- phpmyadminphpMyAdmin Bypass white-list protection for URL redirectionCVE-2016-9861Fix available7.5 High
- phpmyadminphpMyAdmin Denial of Service (DoS)CVE-2016-9860Fix available5.9 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to...CVE-2016-9859Fix available5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to...CVE-2016-9858Fix available5.3 Medium
- phpmyadminphpMyAdmin XSS VulnerabilityCVE-2016-9857Fix available6.1 Medium
- phpmyadminphpMyAdmin XSS VulnerabilityCVE-2016-9856Fix available6.1 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an...CVE-2016-9855Fix available5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an...CVE-2016-9854Fix available5.3 Medium
- phpmyadminphpMyAdmin path disclosureCVE-2016-9853Fix available5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an...CVE-2016-9852Fix available5.3 Medium
- phpmyadminphpMyAdmin Bypass logout timeoutCVE-2016-9851Fix available5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in...CVE-2016-9850Fix available5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg[...CVE-2016-9849Fix available9.8 Critical
- phpmyadminAn issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including...CVE-2016-9848Fix available5.3 Medium
- phpmyadminphpMyAdmin Cryptographic VulnerabilityCVE-2016-9847Fix available5.3 Medium
- phpmyadminphpMyAdmin Remote code execution vulnerability when PHP is running with dbase extensionCVE-2016-6633Fix available8.1 High
- phpmyadminphpMyAdmin Denial of service (DOS) attack with dbase extensionCVE-2016-6632Fix available5.9 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. A user can execute a remote code execution attack against...CVE-2016-6631Fix available7.5 High
- phpmyadminAn issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service (DoS...CVE-2016-6630Fix available6.5 Medium
- phpmyadminphpMyAdmin Authentication BypassCVE-2016-6629Fix available9.8 Critical
- phpmyadminphpMyAdmin Reflected File Download attackCVE-2016-6628Fix available6.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location...CVE-2016-6627Fix available5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. An attacker could redirect a user to a malicious web page....CVE-2016-6626Fix available5.4 Medium
- phpmyadminphpMyAdmin allows to detect if user is logged inCVE-2016-6625Fix available4.3 Medium
- phpmyadminphpMyAdmin IPv6 and proxy server IP-based authentication rule circumventionCVE-2016-6624Fix available5.9 Medium
- phpmyadminphpMyAdmin DoS VulnerabilityCVE-2016-6623Fix available6.5 Medium
- phpmyadminphpMyAdmin DoS VulnerabilityCVE-2016-6622Fix available5.9 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize() function...CVE-2016-6620Fix available9.8 Critical
- phpmyadminAn issue was discovered in phpMyAdmin. In the user interface preference feature, a user can...CVE-2016-6619Fix available8.8 High
- phpmyadminphpMyAdmin Denial of service (DOS) attack in transformation featureCVE-2016-6618Fix available6.5 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can...CVE-2016-6616Fix available7.5 High
- phpmyadminXSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding...CVE-2016-6615Fix available6.1 Medium
- phpmyadminAn issue was discovered in phpMyAdmin involving the %u username replacement functionality of the...CVE-2016-6614Fix available6.8 Medium
- phpmyadminphpMyAdmin Local file exposure through symlinks with UploadDirCVE-2016-6613Fix available5.3 Medium
- phpmyadminphpMyAdmin Local file exposureCVE-2016-6612Fix available6.5 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used...CVE-2016-6611Fix available8.1 High
- phpmyadminA full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a...CVE-2016-6610Fix available4.3 Medium
- phpmyadminphpMyAdmin PHP code injectionCVE-2016-6609Fix available8.8 High
- phpmyadminXSS issues were discovered in phpMyAdmin. This affects Zoom search (specially crafted column...CVE-2016-6607Fix available6.1 Medium
- phpmyadminAn issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username...CVE-2016-6606Fix available8.1 High
- phpmyadmin, opensuse +1 moreDirectory traversal vulnerability in libraries/error_report.lib.php in phpMyAdmin before 4.6.2...CVE-2016-50985.3 Medium
- phpmyadmin, opensuse +1 morephpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be...CVE-2016-5097Fix available5.3 Medium
- phpmyadmin, opensuse leap, opensuse +2 morephpMyAdmin vulnerable to Cross-Site Request ForgeryCVE-2016-5739Fix available7.5 High
- Show moreLoading…