| phpMyAdmin | Number Of NVD | 270 | CRITICAL | 15 | HIGH | 53 | MEDIUM | 172 | LOW | 30 |
| URL | https://www.phpmyadmin.net/ | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Explanation | phpMyAdmin is a free software tool written in PHP and intended to handle the administration of MySQL via the web. phpMyAdmin supports a wide range of operations on MySQL and MariaDB. Frequently used operations (managing databases, tables, columns, relations, indexes, users, permissions, etc.) can be performed via the user interface, with the ability to execute SQL statements directly. Translated and excerpted from [https://www.phpmyadmin.net/]. This is a convenient way to manage MySQL without having to type SQL directly. |
||||||||
| Tag | |||||||||
| No | Type | Name | URL |
|---|---|---|---|
| 1 | https://www.phpmyadmin.net/downloads/ | ||
| 2 | https://www.phpmyadmin.net/files/ | ||
| 3 | https://www.phpmyadmin.net/security/ |
| No | Name | Latest Version | Release date | Initial release | Normal Support | Security Support Service Pack Support |
Extended for a fee |
Critical | High | Medium | Low |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 111 | phpMyAdmin 5 | 5.2.3 | Oct. 8, 2025 | Dec. 26, 2019 | 2 | 5 | 4 | 0 | |||
| 112 | phpMyAdmin 4 | 4.9.7 | Oct. 15, 2020 | May 3, 2013 | 13 | 30 | 89 | 16 | |||
| 113 | phpMyAdmin 3 | 3.5.8.2 | July 28, 2013 | Sept. 27, 2008 | 4 | 8 | 48 | 10 | |||
| 114 | phpMyAdmin 2 | 2.11.11.3 | Feb. 11, 2011 | May 12, 1999 | 4 | 22 | 64 | 10 | |||
| 115 | phpMyAdmin 1 | 1.3.1 | Dec. 27, 1998 | Nov. 3, 1998 | 3 | 10 | 21 | 6 | |||
| 116 | phpMyAdmin 0 | 0.9.0 | 3 | 9 | 21 | 6 |
| No | CVSS3 CVSS2 |
Level Attach Vector |
Title | CWE | CVE | cpe23Uri | or higher | or less | more than | less than | Update date Published date |
Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 111 |
5.3 5.0 |
MEDIUM
Network |
libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to bypass int… |
CWE-200
Information Exposure |
CVE-2016-2039 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:* cpe:2.3:a:phpmyadmin:phpmyadmin:4… |
2024-11-21 11:47 2016-02-20 |
Show | GitHub Exploit DB Packet Storm | ||||
| 112 |
5.3 5.0 |
MEDIUM
Network |
phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error… |
CWE-200
Information Exposure |
CVE-2016-2038 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:* cpe:2.3:a:phpmyadmin:phpmyadmin:4… |
2024-11-21 11:47 2016-02-20 |
Show | GitHub Exploit DB Packet Storm | ||||
| 113 |
7.5 5.0 |
HIGH
Network |
The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easie… |
CWE-255 CWE-254 Credentials Management 7PK - Security Features |
CVE-2016-1927 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:* cpe:2.3:a:phpmyadmin:phpmyadmin:4… |
2024-11-21 11:47 2016-02-20 |
Show | GitHub Exploit DB Packet Storm | ||||
| 114 |
5.3 5.0 |
MEDIUM
Network |
libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, … |
CWE-200
Information Exposure |
CVE-2015-8669 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2:* cpe:2.3:a:phpmyadmin:phpmyadmin:4… |
2024-11-21 11:38 2015-12-27 |
Show | GitHub Exploit DB Packet Storm | ||||
| 115 |
- 5.0 |
MEDIUM | The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter. |
CWE-254
7PK - Security Features |
CVE-2015-7873 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2:* cpe:2.3:a:phpmyadmin:phpmyadmin… |
2024-11-21 11:37 2015-10-28 |
Show | GitHub Exploit DB Packet Storm | ||||
| 116 |
- 5.0 |
MEDIUM | libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against… |
CWE-200
Information Exposure |
CVE-2015-6830 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:* cpe:2.3:a:phpmyadmin:phpmyadmin:4… |
2024-11-21 11:35 2015-09-14 |
Show | GitHub Exploit DB Packet Storm | ||||
| 117 |
- 4.3 |
MEDIUM | libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables X.509 certificate verification for GitHub API calls ov… |
CWE-310
Cryptographic Issues |
CVE-2015-3903 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:* cpe:2.3:a:phpmyadmin:phpmyadmin:4… |
2024-11-21 11:30 2015-05-27 |
Show | GitHub Exploit DB Packet Storm | ||||
| 118 |
- 6.8 |
MEDIUM | Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remo… |
CWE-352
Origin Validation Error |
CVE-2015-3902 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:* cpe:2.3:a:phpmyadmin:phpmyadmin:4… |
2024-11-21 11:30 2015-05-27 |
Show | GitHub Exploit DB Packet Storm | ||||
| 119 |
- 5.0 |
MEDIUM | libraries/select_lang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 includes invalid language values in unknown-language error responses that contain a… |
CWE-200
Information Exposure |
CVE-2015-2206 |
cpe:2.3:a:phpmyadmin:phpmyadmin:4.3.9:* cpe:2.3:a:phpmyadmin:phpmyadmin:4.3.8:* cpe:2.3:a:phpmyadmin:phpmyadmin:4… |
2024-11-21 11:27 2015-03-10 |
Show | GitHub Exploit DB Packet Storm | ||||
| 120 |
- 3.5 |
LOW | Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script o… |
CWE-79
Cross-site Scripting |
CVE-2011-3592 |
cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.4.0:* cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.2:* cpe:2.3:a:phpmyadmin:phpmyadm… |
2024-11-21 10:30 2014-12-26 |
Show | GitHub Exploit DB Packet Storm |