phpmyadmin vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the phpmyadmin package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • M
Resource Exhaustion

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
SQL Injection

*
  • M
SQL Injection

*
  • M
SQL Injection

*
  • M
CVE-2019-19617

*
  • M
Cross-site Request Forgery (CSRF)

*
  • M
SQL Injection

*
  • M
Cross-site Request Forgery (CSRF)

*
  • M
CVE-2019-6799

*
  • M
SQL Injection

*
  • M
Information Exposure

*
  • M
Cross-site Request Forgery (CSRF)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
CVE-2017-18264

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Input Validation

*
  • L
Improper Input Validation

*
  • M
Cross-site Scripting (XSS)

*
  • L
Server-Side Request Forgery (SSRF)

*
  • L
Open Redirect

*
  • M
Server-Side Request Forgery (SSRF)

*
  • M
Improper Input Validation

*
  • M
Cross-site Request Forgery (CSRF)

*
  • M
SQL Injection

*
  • M
Security Features

*
  • M
Security Features

*
  • H
Cryptographic Issues

<4:4.5.4.1-2ubuntu2.1
  • L
Information Exposure

*
  • L
Information Exposure

*
  • M
Cryptographic Issues

*
  • L
Information Exposure

*
  • L
Cross-site Scripting (XSS)

*
  • H
OS Command Injection

<4:4.5.4.1-2ubuntu2.1
  • M
SQL Injection

*
  • L
Resource Management Errors

*
  • M
Improper Input Validation

*
  • L
Resource Management Errors

*
  • L
Information Exposure

*
  • L
Information Exposure

*
  • M
Security Features

*
  • M
Improper Input Validation

*
  • M
Security Features

*
  • M
Information Exposure

*
  • L
Information Exposure

*
  • M
Security Features

*
  • M
Security Features

*
  • L
Information Exposure

*
  • L
Directory Traversal

*
  • M
Cross-site Scripting (XSS)

*
  • L
CVE-2016-6618

*
  • M
Deserialization of Untrusted Data

*
  • M
SQL Injection

*
  • L
Cross-site Scripting (XSS)

*
  • L
Cross-site Scripting (XSS)

*
  • M
Access Restriction Bypass

*
  • M
Security Features

*
  • M
SQL Injection

*
  • L
Information Exposure

*
  • M
Improper Input Validation

*
  • M
Improper Input Validation

*
  • M
Information Exposure

*
  • M
Security Features

*
  • M
Arbitrary Command Injection

*
  • M
Information Exposure

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
SQL Injection

*
  • M
Security Features

*
  • M
Information Exposure

*
  • L
Resource Management Errors

*
  • M
Cross-site Scripting (XSS)

*
  • M
Information Exposure

*
  • M
Cross-site Scripting (XSS)

*
  • M
Arbitrary Code Injection

*
  • L
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Arbitrary Code Injection

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Input Validation

*