phpMyAdmin vulnerabilities
13 published CVEs name phpMyAdmin among the affected products.
- 13Published CVEs13 of them scored
- 10Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-121263
phpMyAdmin MoTranslator Loader.php getTranslator path traversal
phpMyAdmin · MoTranslator
Medium5.3 - CVE-2026-121262
phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion
phpMyAdmin · SQL-Parser
Medium6.9 - CVE-2026-121261
phpMyAdmin ShapeFile SHP File loadFromFile infinite loop
phpMyAdmin · ShapeFile
Medium5.3 - CVE-2026-119563
phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name
phpMyAdmin · phpMyAdmin
Medium5.1 - CVE-2026-119562
phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute
phpMyAdmin · phpMyAdmin
Low2.3 - CVE-2026-119561
phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer
phpMyAdmin · phpMyAdmin
High7.6 - CVE-2026-119429
phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set
phpMyAdmin · phpMyAdmin
Medium5.3 - CVE-2026-119428
phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled
phpMyAdmin · phpMyAdmin
Medium6.3 - CVE-2026-119427
phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting
phpMyAdmin · phpMyAdmin
Low2.3 - CVE-2026-119426
phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql
phpMyAdmin · phpMyAdmin
High7.7