Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
phpMyAdmin Number Of NVD 270 CRITICAL 15 HIGH 53 MEDIUM 172 LOW 30
URL https://www.phpmyadmin.net/
Explanation phpMyAdmin is a free software tool written in PHP and intended to handle the administration of MySQL via the web. phpMyAdmin supports a wide range of operations on MySQL and MariaDB. Frequently used operations (managing databases, tables, columns, relations, indexes, users, permissions, etc.) can be performed via the user interface, with the ability to execute SQL statements directly.

Translated and excerpted from [https://www.phpmyadmin.net/].

This is a convenient way to manage MySQL without having to type SQL directly.
Tag
  • GPL v2
Add Information URL
No Type Name URL
1 https://www.phpmyadmin.net/downloads/
2 https://www.phpmyadmin.net/files/
3 https://www.phpmyadmin.net/security/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
121 phpMyAdmin 5 5.2.3 Oct. 8, 2025 Dec. 26, 2019 2 5 4 0
122 phpMyAdmin 4 4.9.7 Oct. 15, 2020 May 3, 2013 13 30 89 16
123 phpMyAdmin 3 3.5.8.2 July 28, 2013 Sept. 27, 2008 4 8 48 10
124 phpMyAdmin 2 2.11.11.3 Feb. 11, 2011 May 12, 1999 4 22 64 10
125 phpMyAdmin 1 1.3.1 Dec. 27, 1998 Nov. 3, 1998 3 10 21 6
126 phpMyAdmin 0 0.9.0 3 9 21 6
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
121 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an imprope… CWE-79
Cross-site Scripting 		CVE-2011-3591 cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.4.0:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.2:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2024-11-21 10:30
2014-12-26 		Show GitHub Exploit DB Packet Storm
122 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter. CWE-79
Cross-site Scripting 		CVE-2014-9219 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 11:20
2014-12-8 		Show GitHub Exploit DB Packet Storm
123 -
5.0 		MEDIUM libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service (resource consumption) via a long p… CWE-399
 Resource Management Errors 		CVE-2014-9218 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 11:20
2014-12-8 		Show GitHub Exploit DB Packet Storm
124 -
4.0 		MEDIUM Directory traversal vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users to obt… CWE-22
Path Traversal 		CVE-2014-8961 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 11:20
2014-11-30 		Show GitHub Exploit DB Packet Storm
125 -
3.5 		LOW Cross-site scripting (XSS) vulnerability in libraries/error_report.lib.php in the error-reporting feature in phpMyAdmin 4.1.x before 4.1.14.7 and 4.2.x before 4.2.12 allows remote authenticated users… CWE-79
Cross-site Scripting 		CVE-2014-8960 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:20
2014-11-30 		Show GitHub Exploit DB Packet Storm
126 -
6.5 		MEDIUM Directory traversal vulnerability in libraries/gis/GIS_Factory.class.php in the GIS editor in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allows remote authentica… CWE-22
Path Traversal 		CVE-2014-8959 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:20
2014-11-30 		Show GitHub Exploit DB Packet Storm
127 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject arbitrary web script… CWE-79
Cross-site Scripting 		CVE-2014-8958 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 11:20
2014-11-30 		Show GitHub Exploit DB Packet Storm
128 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arb… CWE-79
Cross-site Scripting 		CVE-2014-6300 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.7:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:14
2014-11-8 		Show GitHub Exploit DB Packet Storm
129 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web scri… CWE-79
Cross-site Scripting 		CVE-2014-8326 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:18
2014-11-5 		Show GitHub Exploit DB Packet Storm
130 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2014-7217 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.9:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:16
2014-10-3 		Show GitHub Exploit DB Packet Storm