Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
phpMyAdmin Number Of NVD 270 CRITICAL 15 HIGH 53 MEDIUM 172 LOW 30
URL https://www.phpmyadmin.net/
Explanation phpMyAdmin is a free software tool written in PHP and intended to handle the administration of MySQL via the web. phpMyAdmin supports a wide range of operations on MySQL and MariaDB. Frequently used operations (managing databases, tables, columns, relations, indexes, users, permissions, etc.) can be performed via the user interface, with the ability to execute SQL statements directly.

Translated and excerpted from [https://www.phpmyadmin.net/].

This is a convenient way to manage MySQL without having to type SQL directly.
Tag
  • GPL v2
Add Information URL
No Type Name URL
1 https://www.phpmyadmin.net/downloads/
2 https://www.phpmyadmin.net/files/
3 https://www.phpmyadmin.net/security/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
131 phpMyAdmin 5 5.2.3 Oct. 8, 2025 Dec. 26, 2019 2 5 4 0
132 phpMyAdmin 4 4.9.7 Oct. 15, 2020 May 3, 2013 13 30 89 16
133 phpMyAdmin 3 3.5.8.2 July 28, 2013 Sept. 27, 2008 4 8 48 10
134 phpMyAdmin 2 2.11.11.3 Feb. 11, 2011 May 12, 1999 4 22 64 10
135 phpMyAdmin 1 1.3.1 Dec. 27, 1998 Nov. 3, 1998 3 10 21 6
136 phpMyAdmin 0 0.9.0 3 9 21 6
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
131 -
3.5 		LOW Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2014-5274 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.7:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.6:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:11
2014-08-22 		Show GitHub Exploit DB Packet Storm
132 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.2, 4.1.x before 4.1.14.3, and 4.2.x before 4.2.7.1 allow remote authenticated users to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2014-5273 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.7:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.6:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:11
2014-08-22 		Show GitHub Exploit DB Packet Storm
133 -
4.0 		MEDIUM server_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 and 4.2.x before 4.2.6 allows remote authenticated users to bypass intended access restrictions and read the MySQL user list via a viewUsers… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4987 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.5:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:11
2014-07-20 		Show GitHub Exploit DB Packet Storm
134 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject ar… CWE-79
Cross-site Scripting 		CVE-2014-4986 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.5:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:11
2014-07-20 		Show GitHub Exploit DB Packet Storm
135 -
3.5 		LOW Cross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte/rte_list.lib.php in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 all… CWE-79
Cross-site Scripting 		CVE-2014-4955 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.5:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:11
2014-07-20 		Show GitHub Exploit DB Packet Storm
136 -
3.5 		LOW Cross-site scripting (XSS) vulnerability in the PMA_getHtmlForActionLinks function in libraries/structure.lib.php in phpMyAdmin 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrar… CWE-79
Cross-site Scripting 		CVE-2014-4954 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.5:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:11
2014-07-20 		Show GitHub Exploit DB Packet Storm
137 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ta… CWE-79
Cross-site Scripting 		CVE-2014-4349 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.3:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.2:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:10
2014-06-25 		Show GitHub Exploit DB Packet Storm
138 -
3.5 		LOW Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) tab… CWE-79
Cross-site Scripting 		CVE-2014-4348 cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.3:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.2:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 11:10
2014-06-25 		Show GitHub Exploit DB Packet Storm
139 -
3.5 		LOW Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action. CWE-79
Cross-site Scripting 		CVE-2014-1879 cpe:2.3:a:phpmyadmin:phpmyadmin:4.1.5:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.1.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		4.1.6 2024-11-21 11:05
2014-02-21 		Show GitHub Exploit DB Packet Storm
140 -
4.3 		MEDIUM phpMyAdmin 3.5.x and 4.0.x before 4.0.5 allows remote attackers to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php. CWE-20
 Improper Input Validation  		CVE-2013-5029 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-08-20 		Show GitHub Exploit DB Packet Storm