Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
phpMyAdmin Number Of NVD 270 CRITICAL 15 HIGH 53 MEDIUM 172 LOW 30
URL https://www.phpmyadmin.net/
Explanation phpMyAdmin is a free software tool written in PHP and intended to handle the administration of MySQL via the web. phpMyAdmin supports a wide range of operations on MySQL and MariaDB. Frequently used operations (managing databases, tables, columns, relations, indexes, users, permissions, etc.) can be performed via the user interface, with the ability to execute SQL statements directly.

Translated and excerpted from [https://www.phpmyadmin.net/].

This is a convenient way to manage MySQL without having to type SQL directly.
Tag
  • GPL v2
Add Information URL
No Type Name URL
1 https://www.phpmyadmin.net/downloads/
2 https://www.phpmyadmin.net/files/
3 https://www.phpmyadmin.net/security/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
141 phpMyAdmin 5 5.2.3 Oct. 8, 2025 Dec. 26, 2019 2 5 4 0
142 phpMyAdmin 4 4.9.7 Oct. 15, 2020 May 3, 2013 13 30 89 16
143 phpMyAdmin 3 3.5.8.2 July 28, 2013 Sept. 27, 2008 4 8 48 10
144 phpMyAdmin 2 2.11.11.3 Feb. 11, 2011 May 12, 1999 4 22 64 10
145 phpMyAdmin 1 1.3.1 Dec. 27, 1998 Nov. 3, 1998 3 10 21 6
146 phpMyAdmin 0 0.9.0 3 9 21 6
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
141 -
6.5 		MEDIUM Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via (1) the scale parameter to pm… CWE-89
SQL Injection 		CVE-2013-5003 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
142 -
3.5 		LOW Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject a… CWE-79
Cross-site Scripting 		CVE-2013-5002 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
143 -
3.5 		LOW Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to … CWE-79
Cross-site Scripting 		CVE-2013-5001 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
144 -
5.0 		MEDIUM phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to config.default.php … CWE-200
Information Exposure 		CVE-2013-5000 cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.8:rc1
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
145 -
5.0 		MEDIUM phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and… CWE-200
Information Exposure 		CVE-2013-4999 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
146 -
5.0 		MEDIUM phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, relat… CWE-200
Information Exposure 		CVE-2013-4998 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
147 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an… CWE-79
Cross-site Scripting 		CVE-2013-4997 cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.8:rc1
cpe:2.3:a:phpmyadmin:phpmyadmin:3.5.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
148 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1)… CWE-79
Cross-site Scripting 		CVE-2013-4996 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
149 -
3.5 		LOW Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query t… CWE-79
Cross-site Scripting 		CVE-2013-4995 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:56
2013-07-31 		Show GitHub Exploit DB Packet Storm
150 -
5.5 		MEDIUM import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal ar… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4729 cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*
cpe:2.3:a:phpmyadmin:phpmyadmin:4… 		2024-11-21 10:56
2013-07-4 		Show GitHub Exploit DB Packet Storm