Vulnerabilities > Phpmyadmin > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-01-26 CVE-2020-22452 SQL Injection vulnerability in PHPmyadmin
SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.
network
low complexity
phpmyadmin CWE-89
critical
 9.8
9.8
2020-10-10 CVE-2020-26935 SQL Injection vulnerability in multiple products
An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3.
network
low complexity
phpmyadmin opensuse fedoraproject debian CWE-89
critical
 9.8
9.8
2019-12-06 CVE-2019-19617 phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.
network
low complexity
phpmyadmin debian
critical
 9.8
9.8
2019-11-22 CVE-2019-18622 SQL Injection vulnerability in multiple products
An issue was discovered in phpMyAdmin before 4.9.2.
network
low complexity
phpmyadmin opensuse fedoraproject CWE-89
critical
 9.8
9.8
2019-06-05 CVE-2019-11768 SQL Injection vulnerability in PHPmyadmin
An issue was discovered in phpMyAdmin before 4.9.0.1.
network
low complexity
phpmyadmin CWE-89
critical
 9.8
9.8
2019-01-26 CVE-2019-6798 SQL Injection vulnerability in PHPmyadmin
An issue was discovered in phpMyAdmin before 4.8.5.
network
low complexity
phpmyadmin CWE-89
critical
 9.8
9.8
2018-05-01 CVE-2017-18264 An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases.
network
low complexity
phpmyadmin debian
critical
 9.8
9.8
2016-12-11 CVE-2016-9866 Cross-Site Request Forgery (CSRF) vulnerability in PHPmyadmin
An issue was discovered in phpMyAdmin.
network
low complexity
phpmyadmin CWE-352
critical
 9.8
9.8
2016-12-11 CVE-2016-9865 Deserialization of Untrusted Data vulnerability in PHPmyadmin
An issue was discovered in phpMyAdmin.
network
low complexity
phpmyadmin CWE-502
critical
 9.8
9.8
2016-12-11 CVE-2016-9849 Permissions, Privileges, and Access Controls vulnerability in PHPmyadmin
An issue was discovered in phpMyAdmin.
network
low complexity
phpmyadmin CWE-264
critical
 9.8
9.8