Skip to content
OpenAdvisories

Package · Alpine

phpmyadmin

67 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2020-5504 Public exploit EPSS 28%

    phpMyAdmin SQL injection in user accounts page

    In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access …

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  • High 8.8
    CVE-2018-12613 Public exploit EPSS 98%

    phpMyAdmin Improper Authentication

    An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an impro…

    phpmyadmin/phpmyadmin phpmyadmin Alpine Packagist
  • High 8.8
    CVE-2018-10188 Public exploit

    phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution

    phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.

    phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Alpine Packagist