Search for packages
Package details: pkg:composer/phpmyadmin/phpmyadmin@4.0.0
purl pkg:composer/phpmyadmin/phpmyadmin@4.0.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (50)
Vulnerability Summary Fixed by
VCID-1dgw-1ueg-sudt
Aliases:
CVE-2019-12922
GHSA-4c9q-64gq-xhx4
A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.
4.9.1
Affected by 12 other vulnerabilities.
VCID-2739-kr2f-fbd8
Aliases:
CVE-2016-5731
GHSA-mwm8-36c5-j5cf
phpMyAdmin Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message.
4.0.10+16
Affected by 0 other vulnerabilities.
4.4.15+7
Affected by 0 other vulnerabilities.
4.6.3
Affected by 13 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-35nm-8pfp-mkaq
Aliases:
CVE-2016-9866
GHSA-jvxx-8xxf-5495
4.0.10+18
Affected by 3 other vulnerabilities.
4.0.10.2
Affected by 12 other vulnerabilities.
4.4.15+9
Affected by 3 other vulnerabilities.
4.6.5
Affected by 3 other vulnerabilities.
VCID-43mn-rf4g-ayg6
Aliases:
CVE-2016-6608
GHSA-jfmj-27fp-qp67
phpMyAdmin Cross-site Scripting (XSS) XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-4age-g5bt-r7f8
Aliases:
CVE-2014-4986
GHSA-jqmr-wqgp-8mh2
phpMyAdmin cross-site scripting Vulnerability in Table or Column Names Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) table name or (2) column name that is improperly handled during construction of an AJAX confirmation message.
4.0.10+1
Affected by 0 other vulnerabilities.
4.0.10.1
Affected by 21 other vulnerabilities.
4.1.14+2
Affected by 0 other vulnerabilities.
4.2.6
Affected by 0 other vulnerabilities.
VCID-4k9b-4mxz-87e5
Aliases:
CVE-2016-6629
GHSA-567r-vqj7-5cw7
phpMyAdmin Authentication Bypass An issue was discovered in phpMyAdmin involving the `$cfg['ArbitraryServerRegexp']` configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-4r9b-k2zk-1kb1
Aliases:
CVE-2014-8326
GHSA-pvr5-84gr-g985
phpMyAdmin Implementation XSS Vulnerability on Server Monitor Page Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) database name or (2) table name, related to the `libraries/DatabaseInterface.class.php` code for SQL debug output and the `js/server_status_monitor.js` code for the server monitor page.
4.0.10+5
Affected by 0 other vulnerabilities.
4.0.10.5
Affected by 9 other vulnerabilities.
4.1.14+6
Affected by 0 other vulnerabilities.
4.2.10+1
Affected by 0 other vulnerabilities.
VCID-5qej-xfah-1kaa
Aliases:
CVE-2016-6628
GHSA-phhm-63xx-v9rr
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-6j1s-geef-pfb6
Aliases:
CVE-2017-1000018
GHSA-47qr-f86f-3wm4
phpMyAdmin DoS Vulnerability phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name
4.0.10+19
Affected by 0 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-7udu-bp8s-t7es
Aliases:
CVE-2017-1000013
GHSA-5h5m-fj48-qpjw
phpMyAdmin Open Redirect phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness
4.0.10+19
Affected by 0 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-838f-2f1n-pkh2
Aliases:
CVE-2014-7217
GHSA-wv8g-fx9j-q2jg
phpMyAdmin cross-site scripting Vulnerability via ENUM value Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted ENUM value that is improperly handled during rendering of the (1) table search or (2) table structure page, related to `libraries/TableSearch.class.php` and `libraries/Util.class.php`.
4.0.10+4
Affected by 0 other vulnerabilities.
4.0.10.4
Affected by 10 other vulnerabilities.
4.1.14+5
Affected by 0 other vulnerabilities.
4.2.9+1
Affected by 0 other vulnerabilities.
VCID-84pb-neh5-73by
Aliases:
CVE-2016-2041
GHSA-8m97-xc46-rw9w
phpMyAdmin Unsafe comparison of XSRF/CSRF token libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier for remote attackers to bypass intended access restrictions by measuring time differences.
4.0.2
Affected by 20 other vulnerabilities.
4.0.10+13
Affected by 0 other vulnerabilities.
4.4.15+3
Affected by 2 other vulnerabilities.
4.5.4
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-96h9-nz2g-g3be
Aliases:
CVE-2016-6618
GHSA-rv6m-chvv-wmxg
phpMyAdmin Denial of service (DOS) attack in transformation feature An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service (DoS) attack against the server. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-ar2s-q1ey-9ua6
Aliases:
CVE-2016-9856
GHSA-j8mx-x32r-5rf4
4.0.10+18
Affected by 3 other vulnerabilities.
4.4.15+9
Affected by 3 other vulnerabilities.
4.6.5
Affected by 3 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-b2mf-bz89-gfau
Aliases:
CVE-2018-19968
GHSA-xc97-r49q-cxgc
An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has access. An attacker must have valid credentials to log in to phpMyAdmin; this vulnerability does not allow an attacker to circumvent the login system.
4.8.4
Affected by 14 other vulnerabilities.
VCID-bjkg-91qs-skcx
Aliases:
CVE-2013-4729
GHSA-x962-w72p-mv7q
phpMyAdmin Global variables scope injection vulnerability import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request.
4.0.4+1
Affected by 0 other vulnerabilities.
4.0.4.1
Affected by 19 other vulnerabilities.
VCID-c4mp-bzke-4bhw
Aliases:
CVE-2016-6622
GHSA-qf3f-7x69-qfv3
phpMyAdmin DoS Vulnerability An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMyAdmin is running with `$cfg['AllowArbitraryServer']=true`. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-dpv2-3xj4-s7hm
Aliases:
CVE-2016-5706
GHSA-9rmm-8fp4-26hv
phpMyAdmin Denial Of Service (DOS) attack js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause a denial of service via a large array in the scripts parameter.
4.0.10+16
Affected by 0 other vulnerabilities.
4.0.10.2
Affected by 12 other vulnerabilities.
4.4.15+7
Affected by 0 other vulnerabilities.
4.6.3
Affected by 13 other vulnerabilities.
VCID-drq8-z1qe-7ufh
Aliases:
CVE-2017-1000017
GHSA-99xj-xqc9-98hr
phpMyAdmin SSRF in replication phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server
4.0.10+19
Affected by 0 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-e3xu-5ny1-rkab
Aliases:
CVE-2016-6633
GHSA-p849-vf5f-f3x7
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-f8m5-7sgh-n7av
Aliases:
CVE-2022-0813
GHSA-vx8q-j7h9-vf6q
Exposure of Sensitive Information to an Unauthorized Actor in PhpMyAdmin PhpMyAdmin before 5.1.3 allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.
5.1.2
Affected by 2 other vulnerabilities.
5.1.3
Affected by 2 other vulnerabilities.
VCID-g67g-ycx6-ebat
Aliases:
CVE-2017-18264
GHSA-5868-g58j-vrj5
An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg['Servers'][$i]['AllowNoPassword'] = false are bypassed under certain PHP versions (e.g., version 5). This can allow the login of users who have no password set even if the administrator has set $cfg['Servers'][$i]['AllowNoPassword'] to false (which is also the default). This occurs because some implementations of the PHP substr function return false when given '' as the first argument.
4.0.10+20
Affected by 0 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
4.7.1
Affected by 21 other vulnerabilities.
VCID-hy45-dt9r-y3a2
Aliases:
CVE-2016-6612
GHSA-fcgm-62p3-f7cm
phpMyAdmin Local file exposure An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-jbs5-da9z-ske9
Aliases:
CVE-2019-6799
GHSA-c8wj-q36q-3wg4
An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.
4.8.5
Affected by 12 other vulnerabilities.
VCID-jxqx-dh1t-eua2
Aliases:
CVE-2016-6624
GHSA-mhxj-6vf8-mwv3
phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules. When phpMyAdmin is used with IPv6 in a proxy server environment, and the proxy server is in the allowed range but the attacking computer is not allowed, this vulnerability can allow the attacking computer to connect despite the IP rules. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-kzr5-ef5h-dfbr
Aliases:
CVE-2016-6613
GHSA-6j2v-g9rg-qcm5
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-mtvz-3r6z-33bk
Aliases:
CVE-2019-19617
GHSA-pgph-mc4p-f8c3
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.
4.9.2
Affected by 10 other vulnerabilities.
VCID-nmus-bk41-qfbq
Aliases:
CVE-2016-1927
GHSA-4gmg-gwjh-3mmr
phpMyAdmin Cryptographic Vulnerability The `suggestPassword` function in `js/functions.js` in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the `Math.random` JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach.
4.0.10+13
Affected by 0 other vulnerabilities.
4.0.10.2
Affected by 12 other vulnerabilities.
4.4.15+3
Affected by 2 other vulnerabilities.
4.5.4
Affected by 2 other vulnerabilities.
VCID-nw94-xevj-tba8
Aliases:
CVE-2020-10804
GHSA-h65r-8fp8-w7cx
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php). A malicious user with access to the server could create a crafted username, and then trick the victim into performing specific actions with that user account (such as editing its privileges).
4.9.5
Affected by 6 other vulnerabilities.
5.0.2
Affected by 7 other vulnerabilities.
VCID-p8xn-tscc-4qhu
Aliases:
CVE-2017-1000015
GHSA-3fgq-cmr4-97rr
4.0.10+19
Affected by 0 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-qkag-45nb-aybv
Aliases:
CVE-2020-5504
GHSA-fgj8-93xx-f6g6
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server.
4.9.4
Affected by 9 other vulnerabilities.
5.0.1
Affected by 10 other vulnerabilities.
VCID-qmfr-5d3y-27au
Aliases:
CVE-2016-6609
GHSA-wpww-hx7x-xfjh
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-qu34-hevh-v3a9
Aliases:
CVE-2016-6621
GHSA-44vv-mm86-7cg6
phpMyAdmin server-side request forgery (SSRF) The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
4.0.10+19
Affected by 0 other vulnerabilities.
4.0.10.2
Affected by 12 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
VCID-qvb8-x5h7-1kax
Aliases:
CVE-2016-9857
GHSA-hmmx-wxh4-9w8w
4.0.10+18
Affected by 3 other vulnerabilities.
4.4.15+9
Affected by 3 other vulnerabilities.
4.6.5
Affected by 3 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-qxgd-ufvd-nue7
Aliases:
CVE-2016-2040
GHSA-pw34-qf6c-84fc
phpMyAdmin XSS Vulnerability Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) table name, (2) SET value, (3) search query, or (4) hostname in a Location header.
4.0.2
Affected by 20 other vulnerabilities.
4.0.10+13
Affected by 0 other vulnerabilities.
4.4.15+3
Affected by 2 other vulnerabilities.
4.5.4
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-rby8-8wrn-h7df
Aliases:
CVE-2014-6300
GHSA-6wfj-2mw7-p5cg
phpMyAdmin micro history Implementation XSS Vulnerability Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.
4.0.10+3
Affected by 0 other vulnerabilities.
4.0.10.3
Affected by 11 other vulnerabilities.
4.1.14+4
Affected by 0 other vulnerabilities.
4.2.8+1
Affected by 0 other vulnerabilities.
VCID-rqvv-7dvy-dqfd
Aliases:
CVE-2016-9860
GHSA-3hw5-fffc-qrg4
4.0.10+18
Affected by 3 other vulnerabilities.
4.4.15+9
Affected by 3 other vulnerabilities.
4.6.5
Affected by 3 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-rs9g-rj3u-1bfy
Aliases:
CVE-2016-9861
GHSA-r326-mp8g-6xfc
4.0.10+18
Affected by 3 other vulnerabilities.
4.4.15+9
Affected by 3 other vulnerabilities.
4.6.5
Affected by 3 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-rspx-kym8-xydx
Aliases:
CVE-2016-5730
GHSA-wm9c-vcv2-vpqc
phpMyAdmin full path disclosure vulnerability phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors involving (1) an array value to FormDisplay.php, (2) incorrect data to validate.php, (3) unexpected data to Validator.php, (4) a missing config directory during setup, or (5) an incorrect OpenID identifier data type, which reveals the full path in an error message.
4.0.10+16
Affected by 0 other vulnerabilities.
4.4.15+7
Affected by 0 other vulnerabilities.
4.6.3
Affected by 13 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-tzn2-z2yc-7ue7
Aliases:
CVE-2013-5002
GHSA-p632-5w74-x8xx
phpMyAdmin Cross-site scripting (XSS) vulnerability via pageNumber value Cross-site scripting (XSS) vulnerability in `libraries/schema/Export_Relation_Schema.class.php` in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schema_export.php.
4.0.4+2
Affected by 3 other vulnerabilities.
4.0.4.2
Affected by 18 other vulnerabilities.
VCID-u6cb-a35s-8yaf
Aliases:
CVE-2019-18622
GHSA-jgjc-332c-8cmc
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature.
4.9.2
Affected by 10 other vulnerabilities.
VCID-vajp-sktz-qyhq
Aliases:
CVE-2020-22278
phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents.
5.0.3
Affected by 3 other vulnerabilities.
VCID-vf18-jwgj-guhn
Aliases:
CVE-2018-19970
GHSA-8987-93fh-rcwq
In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.
4.8.4
Affected by 14 other vulnerabilities.
VCID-x7gr-hgqa-2uek
Aliases:
CVE-2020-10803
GHSA-fcww-8wvc-38q9
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results (in tbl_get_field.php and libraries/classes/Display/Results.php). The attacker must be able to insert crafted data into certain database tables, which when retrieved (for instance, through the Browse tab) can trigger the XSS attack.
4.9.5
Affected by 6 other vulnerabilities.
5.0.2
Affected by 7 other vulnerabilities.
VCID-xrnq-v6ph-97hn
Aliases:
CVE-2016-9847
GHSA-9xhq-pm7v-693p
4.0.10+18
Affected by 3 other vulnerabilities.
4.4.15+9
Affected by 3 other vulnerabilities.
4.6.5
Affected by 3 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-yvwv-ebhn-x3g5
Aliases:
CVE-2016-6625
GHSA-r643-7xfg-ppc5
phpMyAdmin allows to detect if user is logged in An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's session, username, and password are not compromised by this vulnerability. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-z37z-773u-2fd7
Aliases:
CVE-2016-6632
GHSA-426q-975p-w5cr
4.0.10+17
Affected by 0 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-zjy7-eubd-1qbz
Aliases:
CVE-2016-6623
GHSA-2mcj-3r3r-v5wm
4.0.10+17
Affected by 0 other vulnerabilities.
4.0.10.2
Affected by 12 other vulnerabilities.
4.4.15+8
Affected by 0 other vulnerabilities.
4.6.4
Affected by 5 other vulnerabilities.
VCID-zv6a-mj99-p7az
Aliases:
CVE-2020-10802
GHSA-f4cr-3xmc-2wpm
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a crafted database or table name. The attack can be performed if a user attempts certain search operations on the malicious database or table.
4.9.5
Affected by 6 other vulnerabilities.
5.0.2
Affected by 7 other vulnerabilities.
VCID-zxus-a2uc-aqe8
Aliases:
CVE-2017-1000014
GHSA-9hrc-rwrq-v6mh
4.0.10+19
Affected by 0 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-02T12:43:47.293712+00:00 GHSA Importer Affected by VCID-qkag-45nb-aybv https://github.com/advisories/GHSA-fgj8-93xx-f6g6 37.0.0
2025-08-02T12:43:05.203203+00:00 GHSA Importer Affected by VCID-bjkg-91qs-skcx https://github.com/advisories/GHSA-x962-w72p-mv7q 37.0.0
2025-08-02T12:42:53.889997+00:00 GHSA Importer Affected by VCID-838f-2f1n-pkh2 https://github.com/advisories/GHSA-wv8g-fx9j-q2jg 37.0.0
2025-08-02T12:42:46.346073+00:00 GHSA Importer Affected by VCID-nmus-bk41-qfbq https://github.com/advisories/GHSA-4gmg-gwjh-3mmr 37.0.0
2025-08-02T12:42:42.801418+00:00 GHSA Importer Affected by VCID-4age-g5bt-r7f8 https://github.com/advisories/GHSA-jqmr-wqgp-8mh2 37.0.0
2025-08-02T12:42:41.417361+00:00 GHSA Importer Affected by VCID-tzn2-z2yc-7ue7 https://github.com/advisories/GHSA-p632-5w74-x8xx 37.0.0
2025-08-02T12:42:34.987156+00:00 GHSA Importer Affected by VCID-kzr5-ef5h-dfbr https://github.com/advisories/GHSA-6j2v-g9rg-qcm5 37.0.0
2025-08-02T12:42:34.952405+00:00 GHSA Importer Affected by VCID-zjy7-eubd-1qbz https://github.com/advisories/GHSA-2mcj-3r3r-v5wm 37.0.0
2025-08-02T12:42:34.745798+00:00 GHSA Importer Affected by VCID-hy45-dt9r-y3a2 https://github.com/advisories/GHSA-fcgm-62p3-f7cm 37.0.0
2025-08-02T12:42:34.678702+00:00 GHSA Importer Affected by VCID-jxqx-dh1t-eua2 https://github.com/advisories/GHSA-mhxj-6vf8-mwv3 37.0.0
2025-08-02T12:42:34.609314+00:00 GHSA Importer Affected by VCID-yvwv-ebhn-x3g5 https://github.com/advisories/GHSA-r643-7xfg-ppc5 37.0.0
2025-08-02T12:42:34.509577+00:00 GHSA Importer Affected by VCID-4k9b-4mxz-87e5 https://github.com/advisories/GHSA-567r-vqj7-5cw7 37.0.0
2025-08-02T12:42:34.377043+00:00 GHSA Importer Affected by VCID-5qej-xfah-1kaa https://github.com/advisories/GHSA-phhm-63xx-v9rr 37.0.0
2025-08-02T12:42:34.274629+00:00 GHSA Importer Affected by VCID-e3xu-5ny1-rkab https://github.com/advisories/GHSA-p849-vf5f-f3x7 37.0.0
2025-08-02T12:42:34.174978+00:00 GHSA Importer Affected by VCID-z37z-773u-2fd7 https://github.com/advisories/GHSA-426q-975p-w5cr 37.0.0
2025-08-02T12:42:33.991620+00:00 GHSA Importer Affected by VCID-xrnq-v6ph-97hn https://github.com/advisories/GHSA-9xhq-pm7v-693p 37.0.0
2025-08-02T12:42:33.761192+00:00 GHSA Importer Affected by VCID-qvb8-x5h7-1kax https://github.com/advisories/GHSA-hmmx-wxh4-9w8w 37.0.0
2025-08-02T12:42:33.587185+00:00 GHSA Importer Affected by VCID-ar2s-q1ey-9ua6 https://github.com/advisories/GHSA-j8mx-x32r-5rf4 37.0.0
2025-08-02T12:42:33.518149+00:00 GHSA Importer Affected by VCID-rqvv-7dvy-dqfd https://github.com/advisories/GHSA-3hw5-fffc-qrg4 37.0.0
2025-08-02T12:42:33.418123+00:00 GHSA Importer Affected by VCID-rs9g-rj3u-1bfy https://github.com/advisories/GHSA-r326-mp8g-6xfc 37.0.0
2025-08-02T12:42:33.348564+00:00 GHSA Importer Affected by VCID-35nm-8pfp-mkaq https://github.com/advisories/GHSA-jvxx-8xxf-5495 37.0.0
2025-08-02T12:42:04.649100+00:00 GHSA Importer Affected by VCID-96h9-nz2g-g3be https://github.com/advisories/GHSA-rv6m-chvv-wmxg 37.0.0
2025-08-02T12:42:04.583554+00:00 GHSA Importer Affected by VCID-c4mp-bzke-4bhw https://github.com/advisories/GHSA-qf3f-7x69-qfv3 37.0.0
2025-08-02T12:42:04.416886+00:00 GHSA Importer Affected by VCID-qmfr-5d3y-27au https://github.com/advisories/GHSA-wpww-hx7x-xfjh 37.0.0
2025-08-02T12:41:50.164755+00:00 GHSA Importer Affected by VCID-rby8-8wrn-h7df https://github.com/advisories/GHSA-6wfj-2mw7-p5cg 37.0.0
2025-08-02T12:41:48.827751+00:00 GHSA Importer Affected by VCID-rspx-kym8-xydx https://github.com/advisories/GHSA-wm9c-vcv2-vpqc 37.0.0
2025-08-02T12:41:48.784015+00:00 GHSA Importer Affected by VCID-2739-kr2f-fbd8 https://github.com/advisories/GHSA-mwm8-36c5-j5cf 37.0.0
2025-08-02T12:41:48.381723+00:00 GHSA Importer Affected by VCID-dpv2-3xj4-s7hm https://github.com/advisories/GHSA-9rmm-8fp4-26hv 37.0.0
2025-08-02T12:41:48.035692+00:00 GHSA Importer Affected by VCID-qxgd-ufvd-nue7 https://github.com/advisories/GHSA-pw34-qf6c-84fc 37.0.0
2025-08-02T12:41:47.991150+00:00 GHSA Importer Affected by VCID-84pb-neh5-73by https://github.com/advisories/GHSA-8m97-xc46-rw9w 37.0.0
2025-08-02T12:41:47.475556+00:00 GHSA Importer Affected by VCID-4r9b-k2zk-1kb1 https://github.com/advisories/GHSA-pvr5-84gr-g985 37.0.0
2025-08-02T12:41:37.677274+00:00 GHSA Importer Affected by VCID-zxus-a2uc-aqe8 https://github.com/advisories/GHSA-9hrc-rwrq-v6mh 37.0.0
2025-08-02T12:41:37.646014+00:00 GHSA Importer Affected by VCID-7udu-bp8s-t7es https://github.com/advisories/GHSA-5h5m-fj48-qpjw 37.0.0
2025-08-02T12:41:37.361943+00:00 GHSA Importer Affected by VCID-6j1s-geef-pfb6 https://github.com/advisories/GHSA-47qr-f86f-3wm4 37.0.0
2025-08-02T12:41:37.329728+00:00 GHSA Importer Affected by VCID-p8xn-tscc-4qhu https://github.com/advisories/GHSA-3fgq-cmr4-97rr 37.0.0
2025-08-02T12:41:34.608243+00:00 GHSA Importer Affected by VCID-drq8-z1qe-7ufh https://github.com/advisories/GHSA-99xj-xqc9-98hr 37.0.0
2025-08-02T12:41:21.764368+00:00 GHSA Importer Affected by VCID-vf18-jwgj-guhn https://github.com/advisories/GHSA-8987-93fh-rcwq 37.0.0
2025-08-01T10:37:41.599951+00:00 GitLab Importer Affected by VCID-qkag-45nb-aybv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2020-5504.yml 37.0.0
2025-08-01T10:30:27.294916+00:00 GitLab Importer Affected by VCID-4age-g5bt-r7f8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2014-4986.yml 37.0.0
2025-08-01T10:29:50.043887+00:00 GitLab Importer Affected by VCID-zjy7-eubd-1qbz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6623.yml 37.0.0
2025-08-01T10:29:28.138000+00:00 GitLab Importer Affected by VCID-838f-2f1n-pkh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2014-7217.yml 37.0.0
2025-08-01T10:27:09.926148+00:00 GitLab Importer Affected by VCID-qu34-hevh-v3a9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6621.yml 37.0.0
2025-08-01T10:16:37.296675+00:00 GitLab Importer Affected by VCID-f8m5-7sgh-n7av https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2022-0813.yml 37.0.0
2025-08-01T09:44:31.499579+00:00 GitLab Importer Affected by VCID-vajp-sktz-qyhq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2020-22278.yml 37.0.0
2025-08-01T09:30:29.151887+00:00 GitLab Importer Affected by VCID-nw94-xevj-tba8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2020-10804.yml 37.0.0
2025-08-01T09:30:28.538658+00:00 GitLab Importer Affected by VCID-x7gr-hgqa-2uek https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2020-10803.yml 37.0.0
2025-08-01T09:30:28.187778+00:00 GitLab Importer Affected by VCID-zv6a-mj99-p7az https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2020-10802.yml 37.0.0
2025-08-01T09:27:24.381941+00:00 GitLab Importer Affected by VCID-mtvz-3r6z-33bk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2019-19617.yml 37.0.0
2025-08-01T09:27:13.291492+00:00 GitLab Importer Affected by VCID-u6cb-a35s-8yaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2019-18622.yml 37.0.0
2025-08-01T09:25:15.821767+00:00 GitLab Importer Affected by VCID-1dgw-1ueg-sudt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2019-12922.yml 37.0.0
2025-07-31T12:33:25.099988+00:00 GHSA Importer Affected by VCID-g67g-ycx6-ebat https://github.com/advisories/GHSA-5868-g58j-vrj5 37.0.0
2025-07-31T09:28:16.563722+00:00 GitLab Importer Affected by VCID-bjkg-91qs-skcx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2013-4729.yml 37.0.0
2025-07-31T09:28:15.525320+00:00 GitLab Importer Affected by VCID-tzn2-z2yc-7ue7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2013-5002.yml 37.0.0
2025-07-31T09:28:11.415793+00:00 GitLab Importer Affected by VCID-nmus-bk41-qfbq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-1927.yml 37.0.0
2025-07-31T09:28:10.848980+00:00 GitLab Importer Affected by VCID-35nm-8pfp-mkaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-9866.yml 37.0.0
2025-07-31T09:28:02.805904+00:00 GitLab Importer Affected by VCID-rby8-8wrn-h7df https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2014-6300.yml 37.0.0
2025-07-31T09:27:58.099957+00:00 GitLab Importer Affected by VCID-4r9b-k2zk-1kb1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2014-8326.yml 37.0.0
2025-07-31T09:27:46.875073+00:00 GitLab Importer Affected by VCID-dpv2-3xj4-s7hm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-5706.yml 37.0.0
2025-07-31T09:23:47.756982+00:00 GitLab Importer Affected by VCID-jbs5-da9z-ske9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2019-6799.yml 37.0.0
2025-07-31T09:23:37.384793+00:00 GitLab Importer Affected by VCID-vf18-jwgj-guhn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2018-19970.yml 37.0.0
2025-07-31T09:23:37.214806+00:00 GitLab Importer Affected by VCID-b2mf-bz89-gfau https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2018-19968.yml 37.0.0
2025-07-31T09:22:41.715280+00:00 GitLab Importer Affected by VCID-g67g-ycx6-ebat https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2017-18264.yml 37.0.0
2025-07-31T09:21:57.678235+00:00 GitLab Importer Affected by VCID-drq8-z1qe-7ufh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2017-1000017.yml 37.0.0
2025-07-31T09:21:57.518780+00:00 GitLab Importer Affected by VCID-zxus-a2uc-aqe8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2017-1000014.yml 37.0.0
2025-07-31T09:21:57.267493+00:00 GitLab Importer Affected by VCID-7udu-bp8s-t7es https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2017-1000013.yml 37.0.0
2025-07-31T09:21:57.226125+00:00 GitLab Importer Affected by VCID-6j1s-geef-pfb6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2017-1000018.yml 37.0.0
2025-07-31T09:21:56.396500+00:00 GitLab Importer Affected by VCID-p8xn-tscc-4qhu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2017-1000015.yml 37.0.0
2025-07-31T09:21:39.665793+00:00 GitLab Importer Affected by VCID-96h9-nz2g-g3be https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6618.yml 37.0.0
2025-07-31T09:21:39.632682+00:00 GitLab Importer Affected by VCID-yvwv-ebhn-x3g5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6625.yml 37.0.0
2025-07-31T09:21:39.597151+00:00 GitLab Importer Affected by VCID-qmfr-5d3y-27au https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6609.yml 37.0.0
2025-07-31T09:21:39.559984+00:00 GitLab Importer Affected by VCID-kzr5-ef5h-dfbr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6613.yml 37.0.0
2025-07-31T09:21:39.520265+00:00 GitLab Importer Affected by VCID-43mn-rf4g-ayg6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6608.yml 37.0.0
2025-07-31T09:21:39.450386+00:00 GitLab Importer Affected by VCID-4k9b-4mxz-87e5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6629.yml 37.0.0
2025-07-31T09:21:39.375273+00:00 GitLab Importer Affected by VCID-jxqx-dh1t-eua2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6624.yml 37.0.0
2025-07-31T09:21:39.338996+00:00 GitLab Importer Affected by VCID-hy45-dt9r-y3a2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6612.yml 37.0.0
2025-07-31T09:21:39.305321+00:00 GitLab Importer Affected by VCID-e3xu-5ny1-rkab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6633.yml 37.0.0
2025-07-31T09:21:39.270690+00:00 GitLab Importer Affected by VCID-rqvv-7dvy-dqfd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-9860.yml 37.0.0
2025-07-31T09:21:39.195862+00:00 GitLab Importer Affected by VCID-z37z-773u-2fd7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6632.yml 37.0.0
2025-07-31T09:21:39.124067+00:00 GitLab Importer Affected by VCID-c4mp-bzke-4bhw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6622.yml 37.0.0
2025-07-31T09:21:39.086073+00:00 GitLab Importer Affected by VCID-xrnq-v6ph-97hn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-9847.yml 37.0.0
2025-07-31T09:21:39.047239+00:00 GitLab Importer Affected by VCID-5qej-xfah-1kaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-6628.yml 37.0.0
2025-07-31T09:21:39.009512+00:00 GitLab Importer Affected by VCID-rs9g-rj3u-1bfy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-9861.yml 37.0.0
2025-07-31T09:21:32.967359+00:00 GitLab Importer Affected by VCID-2739-kr2f-fbd8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-5731.yml 37.0.0
2025-07-31T09:21:32.932117+00:00 GitLab Importer Affected by VCID-rspx-kym8-xydx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-5730.yml 37.0.0
2025-07-31T09:21:25.891262+00:00 GitLab Importer Affected by VCID-84pb-neh5-73by https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-2041.yml 37.0.0
2025-07-31T09:21:25.705950+00:00 GitLab Importer Affected by VCID-qxgd-ufvd-nue7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2016-2040.yml 37.0.0