Advisories · Technology
phpMyAdmin.
Every CVE that names phpMyAdmin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name
- phpMyAdmin
- Cross-site scripting (XSS)
- CVSS 2.3 Low
phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute
- phpMyAdmin
- SQL injection
- CVSS 7.6 High
phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer
- phpMyAdmin
- Weak cryptography or TLS
- CVSS 5.3 Medium
phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set
- phpMyAdmin
- CWE-620
- CVSS 6.3 Medium
phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled
- phpMyAdmin
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting
- phpMyAdmin
- SQL injection
- CVSS 7.7 High
phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql
- phpMyAdmin
- Cross-site request forgery (CSRF)
- CVSS 6.4 Medium
Cross-site scripting in phpMyAdmin
- phpMyAdmin
- Cross-site scripting (XSS)