Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/phpmyadmin/phpmyadmin@4.4.15%2B10
purl pkg:composer/phpmyadmin/phpmyadmin@4.4.15%2B10
Tags Ghost
Next non-vulnerable version 4.9.11
Latest non-vulnerable version 5.2.2
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-b5d2-5bfb-bbgz
Aliases:
CVE-2017-1000017
GHSA-99xj-xqc9-98hr
Server-Side Request Forgery (SSRF) phpMyAdmin is vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-hnud-ktgb-dfe6
Aliases:
CVE-2017-18264
GHSA-5868-g58j-vrj5
Improper Privilege Management An issue was discovered in `libraries/common` which allows users who have no password set to log in even if the administrator has set `$cfg['Servers'][$i]['AllowNoPassword']` to `false` (which is also the default).
4.7.0
Affected by 22 other vulnerabilities.
4.7.1
Affected by 21 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:30:54.645119+00:00 GHSA Importer Fixing VCID-7n1n-uj91-8ugg https://github.com/advisories/GHSA-44vv-mm86-7cg6 38.1.0
2026-04-04T14:30:30.640350+00:00 GHSA Importer Fixing VCID-zreq-41ja-pbf1 https://github.com/advisories/GHSA-9hrc-rwrq-v6mh 38.1.0
2026-04-04T14:30:30.612895+00:00 GHSA Importer Fixing VCID-uw6h-fpzy-x3ap https://github.com/advisories/GHSA-5h5m-fj48-qpjw 38.1.0
2026-04-04T14:30:30.494036+00:00 GHSA Importer Fixing VCID-7h9b-a8dp-57hp https://github.com/advisories/GHSA-3fgq-cmr4-97rr 38.1.0
2026-04-04T14:30:30.442153+00:00 GHSA Importer Fixing VCID-24e9-fnt7-jqdu https://github.com/advisories/GHSA-47qr-f86f-3wm4 38.1.0
2026-04-04T14:30:28.059558+00:00 GHSA Importer Fixing VCID-b5d2-5bfb-bbgz https://github.com/advisories/GHSA-99xj-xqc9-98hr 38.1.0
2026-04-01T16:01:40.271245+00:00 GHSA Importer Affected by VCID-hnud-ktgb-dfe6 https://github.com/advisories/GHSA-5868-g58j-vrj5 38.0.0
2026-04-01T13:11:11.820613+00:00 GithubOSV Importer Fixing VCID-7h9b-a8dp-57hp https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-3fgq-cmr4-97rr/GHSA-3fgq-cmr4-97rr.json 38.0.0
2026-04-01T13:09:22.509457+00:00 GithubOSV Importer Fixing VCID-b5d2-5bfb-bbgz https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-99xj-xqc9-98hr/GHSA-99xj-xqc9-98hr.json 38.0.0
2026-04-01T13:08:39.622266+00:00 GithubOSV Importer Fixing VCID-zreq-41ja-pbf1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9hrc-rwrq-v6mh/GHSA-9hrc-rwrq-v6mh.json 38.0.0
2026-04-01T13:08:33.381065+00:00 GithubOSV Importer Fixing VCID-24e9-fnt7-jqdu https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-47qr-f86f-3wm4/GHSA-47qr-f86f-3wm4.json 38.0.0
2026-04-01T13:08:30.883295+00:00 GithubOSV Importer Fixing VCID-7n1n-uj91-8ugg https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-44vv-mm86-7cg6/GHSA-44vv-mm86-7cg6.json 38.0.0
2026-04-01T13:07:56.453344+00:00 GithubOSV Importer Fixing VCID-uw6h-fpzy-x3ap https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5h5m-fj48-qpjw/GHSA-5h5m-fj48-qpjw.json 38.0.0
2026-04-01T12:50:34.224217+00:00 GitLab Importer Fixing VCID-7n1n-uj91-8ugg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6621.yml 38.0.0
2026-04-01T12:47:39.886338+00:00 GitLab Importer Affected by VCID-hnud-ktgb-dfe6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2017-18264.yml 38.0.0
2026-04-01T12:47:16.625885+00:00 GitLab Importer Affected by VCID-b5d2-5bfb-bbgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2017-1000017.yml 38.0.0