Vulnerabilities > Phpmyadmin > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-03-10 | CVE-2022-0813 | Information Exposure vulnerability in PHPmyadmin PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. | 7.5 |
2020-11-04 | CVE-2020-22278 | Improper Neutralization of Formula Elements in a CSV File vulnerability in PHPmyadmin phpMyAdmin through 5.0.2 allows CSV injection via Export Section. | 8.8 |
2020-03-22 | CVE-2020-10802 | SQL Injection vulnerability in multiple products In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. | 8.0 |
2020-03-22 | CVE-2020-10804 | SQL Injection vulnerability in multiple products In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and libraries/classes/UserPassword.php). | 8.0 |
2019-12-06 | CVE-2019-19617 | phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php. | 7.5 |
2019-01-26 | CVE-2019-6798 | SQL Injection vulnerability in PHPmyadmin An issue was discovered in phpMyAdmin before 4.8.5. | 7.5 |
2018-05-01 | CVE-2017-18264 | An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. | 7.5 |
2016-12-11 | CVE-2016-9865 | 7PK - Security Features vulnerability in PHPmyadmin An issue was discovered in phpMyAdmin. | 7.5 |
2016-12-11 | CVE-2016-9849 | Permissions, Privileges, and Access Controls vulnerability in PHPmyadmin An issue was discovered in phpMyAdmin. | 7.5 |
2016-12-11 | CVE-2016-6631 | OS Command Injection vulnerability in PHPmyadmin An issue was discovered in phpMyAdmin. | 8.5 |