Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 4.0.4.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-4999
phpMyAdmin 4.0.x prior to 4.0.4.2 allows remote malicious users to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php.
Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1
NA
CVE-2013-5001
Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x prior to 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a...
Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.4
NA
CVE-2013-4995
Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x prior to 3.5.8.2 and 4.0.x prior to 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query that is not properly handled during the display of row information.
Phpmyadmin Phpmyadmin 3.5.8Phpmyadmin Phpmyadmin 3.5.2.2Phpmyadmin Phpmyadmin 3.5.7Phpmyadmin Phpmyadmin 3.5.8.1Phpmyadmin Phpmyadmin 3.5.6Phpmyadmin Phpmyadmin 3.5.2.1Phpmyadmin Phpmyadmin 3.5.2.0Phpmyadmin Phpmyadmin 3.5.4Phpmyadmin Phpmyadmin 3.5.1.0Phpmyadmin Phpmyadmin 3.5.0.0Phpmyadmin Phpmyadmin 3.5.3.0Phpmyadmin Phpmyadmin 3.5.5Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.4
NA
CVE-2013-4998
phpMyAdmin 3.5.x prior to 3.5.8.2 and 4.0.x prior to 4.0.4.2 allows remote malicious users to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmd_common.php and other files.
Phpmyadmin Phpmyadmin 3.5.0.0Phpmyadmin Phpmyadmin 3.5.7Phpmyadmin Phpmyadmin 3.5.3.0Phpmyadmin Phpmyadmin 3.5.4Phpmyadmin Phpmyadmin 3.5.2.1Phpmyadmin Phpmyadmin 3.5.2.0Phpmyadmin Phpmyadmin 3.5.8Phpmyadmin Phpmyadmin 3.5.2.2Phpmyadmin Phpmyadmin 3.5.8.1Phpmyadmin Phpmyadmin 3.5.1.0Phpmyadmin Phpmyadmin 3.5.6Phpmyadmin Phpmyadmin 3.5.5Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.4.1
NA
CVE-2013-5002
Cross-site scripting (XSS) vulnerability in libraries/schema/Export_Relation_Schema.class.php in phpMyAdmin 3.5.x prior to 3.5.8.2 and 4.0.x prior to 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted pageNumber value to schema_export.p...
Phpmyadmin Phpmyadmin 3.5.2.0Phpmyadmin Phpmyadmin 3.5.8Phpmyadmin Phpmyadmin 3.5.7Phpmyadmin Phpmyadmin 3.5.8.1Phpmyadmin Phpmyadmin 3.5.2.2Phpmyadmin Phpmyadmin 3.5.0.0Phpmyadmin Phpmyadmin 3.5.2.1Phpmyadmin Phpmyadmin 3.5.5Phpmyadmin Phpmyadmin 3.5.4Phpmyadmin Phpmyadmin 3.5.1.0Phpmyadmin Phpmyadmin 3.5.6Phpmyadmin Phpmyadmin 3.5.3.0Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.4
NA
CVE-2013-4996
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x prior to 3.5.8.2 and 4.0.x prior to 4.0.4.2 allow remote malicious users to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo U...
Phpmyadmin Phpmyadmin 3.5.2.2Phpmyadmin Phpmyadmin 3.5.7Phpmyadmin Phpmyadmin 3.5.8.1Phpmyadmin Phpmyadmin 3.5.1.0Phpmyadmin Phpmyadmin 3.5.6Phpmyadmin Phpmyadmin 3.5.3.0Phpmyadmin Phpmyadmin 3.5.2.0Phpmyadmin Phpmyadmin 3.5.8Phpmyadmin Phpmyadmin 3.5.0.0Phpmyadmin Phpmyadmin 3.5.2.1Phpmyadmin Phpmyadmin 3.5.5Phpmyadmin Phpmyadmin 3.5.4Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.4.1
NA
CVE-2013-5003
Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x prior to 3.5.8.2 and 4.0.x prior to 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via (1) the scale parameter to pmd_pdf.php or (2) the pdf_page_number parameter to schema_export.php.
Phpmyadmin Phpmyadmin 3.5.8Phpmyadmin Phpmyadmin 3.5.2.2Phpmyadmin Phpmyadmin 3.5.8.1Phpmyadmin Phpmyadmin 3.5.7Phpmyadmin Phpmyadmin 3.5.6Phpmyadmin Phpmyadmin 3.5.2.1Phpmyadmin Phpmyadmin 3.5.2.0Phpmyadmin Phpmyadmin 3.5.1.0Phpmyadmin Phpmyadmin 3.5.0.0Phpmyadmin Phpmyadmin 3.5.3.0Phpmyadmin Phpmyadmin 3.5.5Phpmyadmin Phpmyadmin 3.5.4Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.4.1
NA
CVE-2013-5029
phpMyAdmin 3.5.x and 4.0.x prior to 4.0.5 allows remote malicious users to bypass the clickjacking protection mechanism via certain vectors related to Header.class.php.
Opensuse Opensuse 12.2Opensuse Opensuse 12.3Phpmyadmin Phpmyadmin 3.5.2.2Phpmyadmin Phpmyadmin 3.5.3.0Phpmyadmin Phpmyadmin 3.5.4Phpmyadmin Phpmyadmin 3.5.5Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 3.5.8Phpmyadmin Phpmyadmin 3.5.8.1Phpmyadmin Phpmyadmin 3.5.8.2Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 3.5.1.0Phpmyadmin Phpmyadmin 3.5.2.1Phpmyadmin Phpmyadmin 3.5.6Phpmyadmin Phpmyadmin 3.5.7Phpmyadmin Phpmyadmin 4.0.4.2Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 3.5.0.0Phpmyadmin Phpmyadmin 3.5.2.0
4.4
CVSSv3
CVE-2016-4412
An issue exists in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the user's valid phpMyAdmin token. All 4.0.x versions (before 4.0.10.16) are affected.
Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.10.5Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.6Phpmyadmin Phpmyadmin 4.0.10.3Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.12Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.8
NA
CVE-2014-4986
Multiple cross-site scripting (XSS) vulnerabilities in js/functions.js in phpMyAdmin 4.0.x prior to 4.0.10.1, 4.1.x prior to 4.1.14.2, and 4.2.x prior to 4.2.6 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) table name or (2) column name ...
Phpmyadmin Phpmyadmin 4.2.3Phpmyadmin Phpmyadmin 4.2.2Phpmyadmin Phpmyadmin 4.1.5Phpmyadmin Phpmyadmin 4.1.4Phpmyadmin Phpmyadmin 4.1.11Phpmyadmin Phpmyadmin 4.1.10Phpmyadmin Phpmyadmin 4.1.1Phpmyadmin Phpmyadmin 4.0.4.2Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.1.9Phpmyadmin Phpmyadmin 4.1.8Phpmyadmin Phpmyadmin 4.1.14.1Phpmyadmin Phpmyadmin 4.1.14Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.2.4Phpmyadmin Phpmyadmin 4.1.7Phpmyadmin Phpmyadmin 4.1.6Phpmyadmin Phpmyadmin 4.1.13
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook