Known Vulnerabilities for products from Phpmyadmin
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Phpmyadmin".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121263 json | Not Provided | 2026-11-03 | 2026-11-03 | |
| CVE-2026-121262 json | Not Provided | 2026-11-03 | 2026-11-09 | |
| CVE-2026-121261 json | Not Provided | 2026-11-03 | 2026-11-07 | |
| CVE-2026-119563 json | phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privileg... | Not Provided | 2026-10-30 | 2026-11-05 |
| CVE-2026-119562 json | phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying u... | Not Provided | 2026-10-30 | 2026-11-04 |
| CVE-2026-119561 json | phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse()... | Not Provided | 2026-10-30 | 2026-11-03 |
| CVE-2026-119429 json | phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remove two... | Not Provided | 2026-10-30 | 2026-11-03 |
| CVE-2026-119428 json | Not Provided | 2026-10-30 | 2026-11-05 | |
| CVE-2026-119427 json | Not Provided | 2026-10-30 | 2026-11-04 | |
| CVE-2026-119426 json | phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arbitrar... | Not Provided | 2026-10-30 | 2026-11-03 |
| CVE-2023-25727 json | In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file thro... | 5.4 - MEDIUM | 2023-02-13 | 2023-02-23 |
| CVE-2022-23808 json | An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup scrip... | 6.1 - MEDIUM | 2022-01-22 | 2023-11-26 |
| CVE-2022-23807 json | An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to php... | 4.3 - MEDIUM | 2022-01-22 | 2023-11-26 |
| CVE-2022-0813 json | PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. Th... | 7.5 - HIGH | 2022-03-10 | 2023-11-26 |
| CVE-2020-26935 json | An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability wa... | 9.8 - CRITICAL | 2020-10-10 | 2023-11-07 |
| CVE-2020-26934 json | phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link. | 6.1 - MEDIUM | 2020-10-10 | 2023-11-07 |
| CVE-2020-22452 json | SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tb... | Not Provided | 2023-01-26 | 2026-07-09 |
| CVE-2020-22278 json | ** DISPUTED ** phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the ... | 8.8 - HIGH | 2020-11-04 | 2023-11-07 |
| CVE-2020-11441 json | ** DISPUTED ** phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields caus... | 6.1 - MEDIUM | 2020-03-31 | 2023-11-07 |
| CVE-2020-10804 json | In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current user... | 8 - HIGH | 2020-03-22 | 2023-11-07 |
Known software with vulnerabilities from Phpmyadmin
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Phpmyadmin | Phpmyadmin | 0.9.0 |