Search for packages
| purl | pkg:composer/phpmyadmin/phpmyadmin@4.3.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-49vs-6j8s-pkey
Aliases: CVE-2015-6830 GHSA-v6fh-vg22-r6cm |
phpMyAdmin ReCaptcha bypass libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha. |
Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-weje-ut8w-3fh9
Aliases: CVE-2023-25727 GHSA-6hr3-44gx-g6wh |
Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger Cross-site Scripting (XSS) by uploading a crafted .sql file through the drag-and-drop interface. By disabling the configuration directive `$cfg['enable_drag_drop_import']`, users will be unable to use the drag and drop upload which would protect against the vulnerability. |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-02T12:42:42.126998+00:00 | GHSA Importer | Affected by | VCID-49vs-6j8s-pkey | https://github.com/advisories/GHSA-v6fh-vg22-r6cm | 37.0.0 |
| 2025-08-02T09:10:20.998017+00:00 | GitLab Importer | Affected by | VCID-49vs-6j8s-pkey | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2015-6830.yml | 37.0.0 |
| 2025-08-01T13:40:30.956042+00:00 | GHSA Importer | Affected by | VCID-weje-ut8w-3fh9 | https://github.com/advisories/GHSA-6hr3-44gx-g6wh | 37.0.0 |
| 2025-07-31T09:28:24.533430+00:00 | GitLab Importer | Affected by | VCID-weje-ut8w-3fh9 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2023-25727.yml | 37.0.0 |