Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
phpMyAdmin Number Of NVD 270 CRITICAL 15 HIGH 53 MEDIUM 172 LOW 30
URL https://www.phpmyadmin.net/
Explanation phpMyAdmin is a free software tool written in PHP and intended to handle the administration of MySQL via the web. phpMyAdmin supports a wide range of operations on MySQL and MariaDB. Frequently used operations (managing databases, tables, columns, relations, indexes, users, permissions, etc.) can be performed via the user interface, with the ability to execute SQL statements directly.

Translated and excerpted from [https://www.phpmyadmin.net/].

This is a convenient way to manage MySQL without having to type SQL directly.
Tag
  • GPL v2
Add Information URL
No Type Name URL
1 https://www.phpmyadmin.net/downloads/
2 https://www.phpmyadmin.net/files/
3 https://www.phpmyadmin.net/security/
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
261 phpMyAdmin 5 5.2.3 Oct. 8, 2025 Dec. 26, 2019 2 5 4 0
262 phpMyAdmin 4 4.9.7 Oct. 15, 2020 May 3, 2013 13 30 89 16
263 phpMyAdmin 3 3.5.8.2 July 28, 2013 Sept. 27, 2008 4 8 48 10
264 phpMyAdmin 2 2.11.11.3 Feb. 11, 2011 May 12, 1999 4 22 64 10
265 phpMyAdmin 1 1.3.1 Dec. 27, 1998 Nov. 3, 1998 3 10 21 6
266 phpMyAdmin 0 0.9.0 3 9 21 6
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
261 -
6.8 		MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zer… NVD-CWE-Other
CVE-2004-1055 cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*
cpe:2.3:a:phpmyadmin:phpm… 		2017-07-11 10:30
2005-03-1 		Show GitHub Exploit DB Packet Storm
262 -
4.3 		MEDIUM Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerChoice parameters in s… CWE-79
Cross-site Scripting 		CVE-2005-0543 cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1_rc1:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.1:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2017-07-11 10:32
2005-02-24 		Show GitHub Exploit DB Packet Storm
263 -
10.0 		HIGH phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters. NVD-CWE-Other
CVE-2004-1147 cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*
cpe:2.3:a:phpmyadmin:phpm… 		2017-07-11 10:30
2005-01-10 		Show GitHub Exploit DB Packet Storm
264 -
5.0 		MEDIUM phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter. NVD-CWE-Other
CVE-2004-1148 cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl3:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl2:*
cpe:2.3:a:phpmyadmin:phpm… 		2017-07-11 10:30
2005-01-10 		Show GitHub Exploit DB Packet Storm
265 -
7.5 		HIGH The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in uns… NVD-CWE-Other
CVE-2004-2630 cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*
cpe:2.3:a:phpmyadmin:phpm… 		2017-07-20 10:29
2004-12-31 		Show GitHub Exploit DB Packet Storm
266 -
7.5 		HIGH Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name. NVD-CWE-Other
CVE-2004-2631 cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2017-07-20 10:29
2004-12-31 		Show GitHub Exploit DB Packet Storm
267 -
7.5 		HIGH phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg['Servers'] variables. NVD-CWE-Other
CVE-2004-2632 cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2017-07-20 10:29
2004-12-31 		Show GitHub Exploit DB Packet Storm
268 -
5.0 		MEDIUM Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter. NVD-CWE-Other
CVE-2004-0129 cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*
cpe:2.3:a:phpmyadmin:phpm… 		2017-10-10 10:30
2004-03-3 		Show GitHub Exploit DB Packet Storm
269 -
7.5 		HIGH phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in t… NVD-CWE-Other
CVE-2001-1060 cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*
cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*
cpe:2.3:a:phpmyadmin:phpmyadm… 		2009-04-3 13:00
2001-07-31 		Show GitHub Exploit DB Packet Storm
270 -
7.5 		HIGH Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script. NVD-CWE-Other
CVE-2001-0478 cpe:2.3:a:phpmyadmin:phpmyadmin:*:* 2.2.0 2008-09-6 05:24
2001-06-27 		Show GitHub Exploit DB Packet Storm