Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

phpmyadmin/phpmyadmin

107 known vulnerabilities (1 critical, 4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
107 · 1 critical, 4 medium
Registry
Packagist

Advisories 107

  • CVE-2025-24530Medium 6.4

    An issue was discovered in phpMyAdmin 5.x before 5.2.2.

    Affected: from 5.0.0, fixed in 5.2.2.

  • CVE-2023-25727Medium 5.4

    In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the…

    Affected: from 4.3.0, fixed in 4.9.11; from 5.0, fixed in 5.2.1.

  • CVE-2020-22452Critical 9.8

    SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the…

    Affected: from 5.0.0, fixed in 5.0.2.

  • CVE-2022-0813Medium 5.3

    PhpMyAdmin exposure of sensitive information

    Affected: fixed in 5.1.3.

  • CVE-2022-23808Medium 6.1

    An issue was discovered in phpMyAdmin 5.1 before 5.1.2.

    Affected: from 5.1.0, fixed in 5.1.2.

  • An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2.

    Affected: from 4.9.0, fixed in 4.9.8; from 5.1.0, fixed in 5.1.2.

  • phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.

    Affected: from 4.9.0, fixed in 4.9.6; from 5.0.0, fixed in 5.0.3.

  • An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3.

    Affected: from 4.9.0, fixed in 4.9.6; from 5.0.0, fixed in 5.0.3.

  • In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not…

    Affected: from 4.9.0, fixed in 4.9.5; from 5.0.0, fixed in 5.0.2.

  • In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to…

    Affected: from 3.4, fixed in 4.9.5; from 5.0.0, fixed in 5.0.2.

  • In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in…

    Affected: from 4.9.0, fixed in 4.9.5; from 5.0.0, fixed in 5.0.2.

  • In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page.

    Affected: from 4.0.0, fixed in 4.9.4; from 5.0.0, fixed in 5.0.1.

  • phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and…

    Affected: fixed in 4.9.2.

  • An issue was discovered in phpMyAdmin before 4.9.2.

    Affected: fixed in 4.9.2.

  • A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

    Affected: fixed in 4.9.1.

Show all 107 advisoriesShow fewer advisories

  • An issue was discovered in phpMyAdmin before 4.9.0.

    Affected: fixed in 4.9.0.

  • An issue was discovered in phpMyAdmin before 4.9.0.1.

    Affected: fixed in 4.9.0.1.

  • An issue was discovered in phpMyAdmin before 4.8.5.

    Affected: from 4.8, fixed in 4.8.5.

  • An issue was discovered in phpMyAdmin before 4.8.5.

    Affected: fixed in 4.8.5.

  • In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user…

    Affected: from 4.0, fixed in 4.8.4.

  • phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws.

    Affected: from 4.8, fixed in 4.8.4; from 4.7, through 4.7.6.

  • An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature.

    Affected: fixed in 4.8.4.

  • An issue was discovered in phpMyAdmin before 4.8.3.

    Affected: fixed in 4.8.3.

  • An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the…

    Affected: from 4.8, fixed in 4.8.2.

  • An issue was discovered in js/designer/move.js in phpMyAdmin before 4.8.2.

    Affected: fixed in 4.8.2.

  • An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases.

    Affected: from 4.0, fixed in 4.0.10.20; from 4.7.0-beta1, fixed in 4.7.0; from 4.4.0, through 4.4.15.10; from 4.6.0, through 4.6.6.

  • phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js…

    Affected: from 4.8, fixed in 4.8.0.1.

  • Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject…

    Affected: fixed in 4.7.8.

  • phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness.

    Affected: from 4.7, fixed in 4.7.7.

  • phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name

    Affected: from 4.6, fixed in 4.6.6; from 4.4, fixed in 4.4.15.10; from 4.0, fixed in 4.0.10.19.

  • phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary…

    Affected: from 4.6, fixed in 4.6.6; from 4.4, fixed in 4.4.15.10; from 4.0, fixed in 4.0.10.19.

  • A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies.

    Affected: from 4.6, fixed in 4.6.6.

  • phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

    Affected: from 4.6.0, fixed in 4.6.6; from 4.4.0, fixed in 4.4.15.10; from 4.0.0, fixed in 4.0.10.19.

  • phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality

    Affected: from 4.6, fixed in 4.6.6; from 4.4, fixed in 4.4.15.10; from 4.0, fixed in 4.0.10.19.

  • phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness

    Affected: from 4.6, fixed in 4.6.6; from 4.4, fixed in 4.4.15.10; from 4.0, fixed in 4.0.10.19.

  • The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct…

    Affected: from 4.6.0, fixed in 4.6.6; from 4.4.0, fixed in 4.4.15.10; fixed in 4.0.10.19.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6.0, fixed in 4.6.5; from 4.4.0, fixed in 4.4.15.9; from 4.0.0, fixed in 4.0.10.18.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6.0, fixed in 4.6.5.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.5; from 4.4, fixed in 4.4.15.9; from 4.0, fixed in 4.0.10.18.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.5; from 4.4, fixed in 4.4.15.9; from 4.0, fixed in 4.0.10.18.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.5; from 4.4, fixed in 4.4.15.9; from 4.0, fixed in 4.0.10.18.

  • An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10.

    Affected: from 4.6, fixed in 4.6.5; from 4.4, fixed in 4.4.15.9; from 4.0, fixed in 4.0.10.18.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6.0, fixed in 4.6.5; from 4.4.0, fixed in 4.4.15.9.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.5; from 4.4, fixed in 4.4.15.9.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.5; from 4.4, fixed in 4.4.15.9; from 4.0, fixed in 4.0.10.18.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI…

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6.0, fixed in 4.6.4; from 4.4.0, fixed in 4.4.15.8; from 4.0.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • An issue was discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4; from 4.4, fixed in 4.4.15.8; from 4.0, fixed in 4.0.10.17.

  • XSS issues were discovered in phpMyAdmin.

    Affected: from 4.6, fixed in 4.6.4.

  • The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the…

    Affected: from 4.0.10.0, fixed in 4.0.10.16; from 4.4.15.0, fixed in 4.4.15.7; from 4.6.0, fixed in 4.6.3.

  • phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the…

    Affected: from 4.0.10.0, fixed in 4.0.10.16; from 4.4.15.0, fixed in 4.4.15.7; from 4.6.0, fixed in 4.6.3.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3…

    Affected: from 4.0.10.0, fixed in 4.0.10.16; from 4.4.15.0, fixed in 4.4.15.7; from 4.6.0, fixed in 4.6.3.

  • Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in…

    Affected: from 4.6.0, fixed in 4.6.3.

  • Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x…

    Affected: from 4.0, fixed in 4.0.10.16; from 4.4, fixed in 4.4.15.7; from 4.6, fixed in 4.6.3.

  • phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information…

    Affected: from 4.0, fixed in 4.0.10.16; from 4.4, fixed in 4.4.15.7; from 4.6, fixed in 4.6.3.

  • js/get_scripts.js.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to cause…

    Affected: from 4.0, fixed in 4.0.10.16; from 4.4, fixed in 4.4.15.7; from 4.6, fixed in 4.6.3.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to…

    Affected: from 4.4.0, fixed in 4.4.15.7; from 4.6.0, fixed in 4.6.3.

  • Cross-site scripting (XSS) vulnerability in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allows remote attackers to inject…

    Affected: from 4.6.0, fixed in 4.6.3.

  • phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHP_SELF value, allows remote attackers to conduct cookie-attribute injection…

    Affected: from 4.6.0, fixed in 4.6.3.

  • setup/frames/index.inc.php in phpMyAdmin 4.0.10.x before 4.0.10.16, 4.4.15.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote…

    Affected: from 4.0.10.0, fixed in 4.0.10.16; from 4.4.15.0, fixed in 4.4.15.7; from 4.6.0, fixed in 4.6.3.

  • The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from…

    Affected: from 4.5, fixed in 4.5.5.1.

  • Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in…

    Affected: from 4.5, fixed in 4.5.5.1.

  • libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time…

    Affected: from 4.0, fixed in 4.0.10.13; from 4.4, fixed in 4.4.15.3; from 4.5, fixed in 4.5.4.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4…

    Affected: from 4.0, fixed in 4.0.10.13; from 4.4, fixed in 4.4.15.3; from 4.5, fixed in 4.5.4.

  • The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies…

    Affected: from 4.0.0, fixed in 4.0.10.13; from 4.4.0, fixed in 4.4.15.3; from 4.5.0, fixed in 4.5.4.

  • The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via…

    Affected: from 4.4.0, fixed in 4.4.15.1; from 4.5.0, fixed in 4.5.1.

  • libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote…

    Affected: from 4.3.0, fixed in 4.3.13.2; from 4.4.0, fixed in 4.4.14.1.

  • Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5…

    Affected: from 3.4.0, fixed in 3.4.5.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary…

    Affected: from 3.4.0, fixed in 3.4.5.

  • Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4…

    Affected: from 4.0.0, fixed in 4.0.10.3; from 4.1.0, fixed in 4.1.14.4; from 4.2.0, fixed in 4.2.8.1.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1…

    Affected: from 4.0.0, fixed in 4.0.10.5; from 4.1.0, fixed in 4.1.14.6; from 4.2.0, fixed in 4.2.10.1.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.4, 4.1.x before 4.1.14.5, and 4.2.x before 4.2.9.1…

    Affected: from 4.0.0, fixed in 4.0.10.4; from 4.1.0, fixed in 4.1.14.5; from 4.2.0, fixed in 4.2.9.1.

  • Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows…

    Affected: from 4.1.0, fixed in 4.1.14.3; from 4.2.0, fixed in 4.2.7.1.

  • Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and…

    Affected: from 4.0.0, fixed in 4.0.10.1; from 4.1.0, fixed in 4.1.14.2; from 4.2.0, fixed in 4.2.6.

  • Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x…

    Affected: from 3.5, fixed in 3.5.8.2; from 4.0, fixed in 4.0.4.2.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web…

    Affected: from 3.5, fixed in 3.5.8.2.

  • import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows…

    Affected: from 4.0, fixed in 4.0.4.1.

  • phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to…

    Affected: from 3.5.0, fixed in 3.5.8.1.

  • phpMyAdmin 3.5.x before 3.5.3 uses JavaScript code that is obtained through an HTTP session to phpmyadmin.net without SSL, which allows…

    Affected: from 3.5, fixed in 3.5.3.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary…

    Affected: from 3.5, fixed in 3.5.3.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject…

    Affected: from 3.5, fixed in 3.5.2.2.

  • Multiple cross-site scripting (XSS) vulnerabilities in the Database Structure page in phpMyAdmin 3.4.x before 3.4.11.1 and 3.5.x before…

    Affected: from 3.4, fixed in 3.4.11.1; from 3.5, fixed in 3.5.2.2.

  • Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to…

    Affected: from 3.4.0, fixed in 3.4.1.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to…

    Affected: from 3.3.0, fixed in 3.3.10.1; from 3.4.0, fixed in 3.4.1.

  • Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9…

    Affected: from 3.4.0, fixed in 3.4.9.

  • Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script…

    Affected: from 3.4.0, fixed in 3.4.8.

  • The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x…

    Affected: from 3.4.0, fixed in 3.4.7.1; from 3.3.0, fixed in 3.3.10.5.

  • Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote…

    Affected: from 3.4, fixed in 3.4.3.2.

  • Directory traversal vulnerability in libraries/display_tbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a…

    Affected: from 3.3.0, fixed in 3.3.10.2; from 3.4.0, fixed in 3.4.3.1.

  • setup/lib/ConfigGenerator.class.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 does not properly restrict the presence of…

    Affected: from 3.0, fixed in 3.3.10.2; from 3.4, fixed in 3.4.3.1.

  • libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1…

    Affected: from 3.0, fixed in 3.3.10.2; from 3.4, fixed in 3.4.3.1.

  • phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the (1) README, (2) ChangeLog, and…

    Affected: from 2.11.0, fixed in 2.11.11.2; from 3.3.0, fixed in 3.3.9.1.

  • phpMyAdmin before 3.4.0-beta1 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to…

    Affected: fixed in 3.4.0-beta1.

  • Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject…

    Affected: from 3.0.0, fixed in 3.3.6.

  • libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and…

    Affected: from 2.11.0, fixed in 2.11.10.

  • Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject…

    Affected: from 2.11.0, fixed in 2.11.9.6; from 3.0.0, fixed in 3.2.2.1.

  • CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote…

    Affected: fixed in 3.1.3.1.

  • CRLF injection vulnerability in phpMyAdmin before 2.6.4-pl4 allows remote attackers to conduct HTTP response splitting attacks via…

    Affected: fixed in 2.6.4-pl4.