Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
phpMyAdmin Number Of NVD 270 CRITICAL 15 HIGH 53 MEDIUM 172 LOW 30
URL https://www.phpmyadmin.net/
Explanation phpMyAdmin is a free software tool written in PHP and intended to handle the administration of MySQL via the web. phpMyAdmin supports a wide range of operations on MySQL and MariaDB. Frequently used operations (managing databases, tables, columns, relations, indexes, users, permissions, etc.) can be performed via the user interface, with the ability to execute SQL statements directly.

Translated and excerpted from [https://www.phpmyadmin.net/].

This is a convenient way to manage MySQL without having to type SQL directly.
Tag
  • GPL v2
Add Information URL
No Type Name URL
1 https://www.phpmyadmin.net/downloads/
2 https://www.phpmyadmin.net/files/
3 https://www.phpmyadmin.net/security/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
181 phpMyAdmin 5 5.2.3 Oct. 8, 2025 Dec. 26, 2019 2 5 4 0
182 phpMyAdmin 4 4.9.7 Oct. 15, 2020 May 3, 2013 13 30 89 16
183 phpMyAdmin 3 3.5.8.2 July 28, 2013 Sept. 27, 2008 4 8 48 10
184 phpMyAdmin 2 2.11.11.3 Feb. 11, 2011 May 12, 1999 4 22 64 10
185 phpMyAdmin 1 1.3.1 Dec. 27, 1998 Nov. 3, 1998 3 10 21 6
186 phpMyAdmin 0 0.9.0 3 9 21 6
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
181 -
7.5 		HIGH setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of comment closing delimiters, which allows remote attackers to … CWE-94
Code Injection 		CVE-2011-2506 cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.0:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.2.0:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2024-11-21 10:28
2011-07-15 		Show GitHub Exploit DB Packet Storm
182 -
6.4 		MEDIUM libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the quer… CWE-94
Code Injection 		CVE-2011-2505 cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.3.0:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.4.2.0:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2024-11-21 10:28
2011-07-15 		Show GitHub Exploit DB Packet Storm
183 -
6.5 		MEDIUM The PMA_Bookmark_get function in libraries/bookmark.lib.php in phpMyAdmin 2.11.x before 2.11.11.3, and 3.3.x before 3.3.9.2, does not properly restrict bookmark queries, which makes it easier for rem… CWE-20
 Improper Input Validation  		CVE-2011-0987 cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.0:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2024-11-21 10:25
2011-02-15 		Show GitHub Exploit DB Packet Storm
184 -
5.0 		MEDIUM phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and (3) LICENSE files, which allows remote attackers to obtain the… CWE-20
 Improper Input Validation  		CVE-2011-0986 cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.0:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		2024-11-21 10:25
2011-02-15 		Show GitHub Exploit DB Packet Storm
185 -
5.0 		MEDIUM phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to phpinfo.php, which calls the phpinfo function. CWE-287
Improper Authentication 		CVE-2010-4481 cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin… 		3.3.9.0 2024-11-21 10:21
2010-12-18 		Show GitHub Exploit DB Packet Storm
186 -
4.3 		MEDIUM error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing "@" characters, as de… CWE-79
Cross-site Scripting 		CVE-2010-4480 cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.9.0:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8.1:* 		2024-11-21 10:21
2010-12-9 		Show GitHub Exploit DB Packet Storm
187 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 a… CWE-79
Cross-site Scripting 		CVE-2010-4329 cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.8:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.7:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3… 		2024-11-21 10:20
2010-12-3 		Show GitHub Exploit DB Packet Storm
188 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in setup/frames/index.inc.php in the setup script in phpMyAdmin 3.x before 3.3.7 allows remote attackers to inject arbitrary web script or HTML via a server n… CWE-79
Cross-site Scripting 		CVE-2010-3263 cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.6.0:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.1:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2024-11-21 10:18
2010-09-11 		Show GitHub Exploit DB Packet Storm
189 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to a PHP backtr… CWE-79
Cross-site Scripting 		CVE-2010-2958 cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.1:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.0:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2024-11-21 10:17
2010-09-9 		Show GitHub Exploit DB Packet Storm
190 -
4.3 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (… CWE-79
Cross-site Scripting 		CVE-2010-3056 cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.5.0:*
cpe:2.3:a:phpmyadmin:phpmyadmin:3.3.4.0:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2024-11-21 10:17
2010-08-25 		Show GitHub Exploit DB Packet Storm