phpMyAdmin

Products

Exploited and recent CVEs

• CVE-2026-121263 Medium 6.3 phpMyAdmin MoTranslator Loader.php getTranslator path traversal 0.5%
• CVE-2026-121262 Medium 5.3 phpMyAdmin SQL-Parser ExplainStatement.php parse type conversion 0.4%
• CVE-2026-121261 Medium 4.3 phpMyAdmin ShapeFile SHP File loadFromFile infinite loop 0.3%
• CVE-2026-119563 Medium 5.4 phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name 0.2%
• CVE-2026-119562 Medium 4.2 phpMyAdmin through 5.2.3 SQL Injection via Central Columns col_extra and col_attribute 0.2%
• CVE-2026-119561 Medium 6.8 phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer 0.2%
• CVE-2026-119429 Medium 4.3 phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set 0.4%
• CVE-2026-119428 Low 3.7 phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled 0.3%
• CVE-2026-119427 Medium 4.2 phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting 0.3%
• CVE-2026-119426 High 7.5 phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql 0.4%
• CVE-2025-24530 Medium 6.4 An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS. 0.4%
• CVE-2025-24529 Medium 6.4 An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the Insert tab. 0.4%
• CVE-2022-0813 Medium 5.3 PhpMyAdmin exposure of sensitive information 1.3%