{"schema_version":1,"title":"phpmyadmin/phpmyadmin (Packagist) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 44 vulnerabilities in phpmyadmin/phpmyadmin (Packagist): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-24530, was published on 23 January 2025.","url":"https://junglewise.ai/threats/technologies/phpmyadmin-phpmyadmin","json_url":"https://junglewise.ai/threats/technologies/phpmyadmin-phpmyadmin.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/phpmyadmin-phpmyadmin","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":44,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":0},"latest":[{"cve":"CVE-2025-24530","cvss":3.1,"epss":0.0042,"slug":"cve-2025-24530-phpmyadmin-xss-when-checking-tables","title":"phpMyAdmin XSS when checking tables","severity":"low","exploited":false,"published_at":"2025-01-23T06:31:49+00:00","url":"https://junglewise.ai/threats/cve-2025-24530-phpmyadmin-xss-when-checking-tables"},{"cve":"CVE-2020-22452","cvss":3.1,"epss":0.0171,"slug":"cve-2020-22452-phpmyadmin-contains-sql-injection-vulnerability","title":"phpmyadmin contains SQL Injection vulnerability","severity":"low","exploited":false,"published_at":"2023-01-26T21:30:29+00:00","url":"https://junglewise.ai/threats/cve-2020-22452-phpmyadmin-contains-sql-injection-vulnerability"},{"cve":"CVE-2019-12922","cvss":3.1,"epss":0.1014,"slug":"cve-2019-12922-phpmyadmin-cross-site-request-forgery-csrf","title":"phpMyAdmin Cross-Site Request Forgery (CSRF)","severity":"low","exploited":false,"published_at":"2022-05-24T22:00:34+00:00","url":"https://junglewise.ai/threats/cve-2019-12922-phpmyadmin-cross-site-request-forgery-csrf"},{"cve":"CVE-2019-19617","cvss":3.1,"epss":0.0259,"slug":"cve-2019-19617-phpmyadmin-unsanitized-git-information","title":"phpMyAdmin unsanitized Git information","severity":"low","exploited":false,"published_at":"2022-05-24T17:02:49+00:00","url":"https://junglewise.ai/threats/cve-2019-19617-phpmyadmin-unsanitized-git-information"},{"cve":"CVE-2019-12616","cvss":3,"epss":0.1918,"slug":"cve-2019-12616-phpmyadmin-csrf-vulnerability","title":"phpMyAdmin CSRF Vulnerability","severity":"low","exploited":false,"published_at":"2022-05-24T16:47:19+00:00","url":"https://junglewise.ai/threats/cve-2019-12616-phpmyadmin-csrf-vulnerability"},{"cve":"CVE-2019-11768","cvss":3,"epss":0.0365,"slug":"cve-2019-11768-phpmyadmin-sql-injection-in-designer-feature","title":"phpMyAdmin SQL injection in Designer feature","severity":"low","exploited":false,"published_at":"2022-05-24T16:47:12+00:00","url":"https://junglewise.ai/threats/cve-2019-11768-phpmyadmin-sql-injection-in-designer-feature"},{"cve":"CVE-2010-2958","cvss":4,"epss":0.019,"slug":"cve-2010-2958-phpmyadmin-cross-site-scripting-vulnerability","title":"phpMyAdmin Cross-site Scripting vulnerability","severity":"medium","exploited":false,"published_at":"2022-05-17T05:48:25+00:00","url":"https://junglewise.ai/threats/cve-2010-2958-phpmyadmin-cross-site-scripting-vulnerability"},{"cve":"CVE-2010-4481","cvss":4,"epss":0.0202,"slug":"cve-2010-4481-phpmyadmin-allows-remote-attackers-to-bypass-authentication-and","title":"phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information","severity":"medium","exploited":false,"published_at":"2022-05-17T05:44:04+00:00","url":"https://junglewise.ai/threats/cve-2010-4481-phpmyadmin-allows-remote-attackers-to-bypass-authentication-and"},{"cve":"CVE-2008-7252","epss":0.0274,"slug":"cve-2008-7252-phpmyadmin-unsafely-handles-temporary-files","title":"phpMyAdmin unsafely handles temporary files","severity":"info","exploited":false,"published_at":"2022-05-17T05:44:03+00:00","url":"https://junglewise.ai/threats/cve-2008-7252-phpmyadmin-unsafely-handles-temporary-files"},{"cve":"CVE-2011-1941","epss":0.0188,"slug":"cve-2011-1941-phpmyadmin-open-redirect-in-redirector","title":"phpMyAdmin Open Redirect in redirector","severity":"info","exploited":false,"published_at":"2022-05-17T05:34:37+00:00","url":"https://junglewise.ai/threats/cve-2011-1941-phpmyadmin-open-redirect-in-redirector"},{"cve":"CVE-2012-4579","epss":0.0082,"slug":"cve-2012-4579-phpmyadmin-multiple-xss-vulnerabilities","title":"phpMyAdmin Multiple XSS Vulnerabilities","severity":"info","exploited":false,"published_at":"2022-05-17T05:25:11+00:00","url":"https://junglewise.ai/threats/cve-2012-4579-phpmyadmin-multiple-xss-vulnerabilities"},{"cve":"CVE-2011-4634","cvss":4,"epss":0.0213,"slug":"cve-2011-4634-phpmyadmin-vulnerable-to-cross-site-scripting","title":"phpMyAdmin vulnerable to Cross-site Scripting","severity":"medium","exploited":false,"published_at":"2022-05-17T05:19:13+00:00","url":"https://junglewise.ai/threats/cve-2011-4634-phpmyadmin-vulnerable-to-cross-site-scripting"},{"cve":"CVE-2012-5339","epss":0.0145,"slug":"cve-2012-5339-phpmyadmin-multiple-cross-site-scripting-vulnerabilities","title":"phpMyAdmin multiple cross-site scripting vulnerabilities","severity":"info","exploited":false,"published_at":"2022-05-17T05:16:32+00:00","url":"https://junglewise.ai/threats/cve-2012-5339-phpmyadmin-multiple-cross-site-scripting-vulnerabilities"},{"cve":"CVE-2012-5368","epss":0.0135,"slug":"cve-2012-5368-phpmyadmin-unsafe-fetching-of-javascript-code","title":"phpMyAdmin Unsafe Fetching of Javascript Code","severity":"info","exploited":false,"published_at":"2022-05-17T05:16:32+00:00","url":"https://junglewise.ai/threats/cve-2012-5368-phpmyadmin-unsafe-fetching-of-javascript-code"},{"cve":"CVE-2013-4729","cvss":3.1,"epss":0.0106,"slug":"cve-2013-4729-phpmyadmin-global-variables-scope-injection-vulnerability","title":"phpMyAdmin Global variables scope injection vulnerability","severity":"low","exploited":false,"published_at":"2022-05-17T05:07:49+00:00","url":"https://junglewise.ai/threats/cve-2013-4729-phpmyadmin-global-variables-scope-injection-vulnerability"},{"cve":"CVE-2013-4997","epss":0.0146,"slug":"cve-2013-4997-phpmyadmin-multiple-cross-site-scripting-xss-vulnerabilities","title":"phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities","severity":"info","exploited":false,"published_at":"2022-05-17T05:07:14+00:00","url":"https://junglewise.ai/threats/cve-2013-4997-phpmyadmin-multiple-cross-site-scripting-xss-vulnerabilities"},{"cve":"CVE-2013-3239","cvss":3.1,"epss":0.0875,"slug":"cve-2013-3239-phpmyadmin-remote-code-execution","title":"phpMyAdmin Remote Code Execution","severity":"low","exploited":false,"published_at":"2022-05-17T04:58:08+00:00","url":"https://junglewise.ai/threats/cve-2013-3239-phpmyadmin-remote-code-execution"},{"cve":"CVE-2011-3591","epss":0.0145,"slug":"cve-2011-3591-phpmyadmin-multiple-xss-vulnerabilities-after-inline-editing-and","title":"phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save","severity":"info","exploited":false,"published_at":"2022-05-17T04:19:07+00:00","url":"https://junglewise.ai/threats/cve-2011-3591-phpmyadmin-multiple-xss-vulnerabilities-after-inline-editing-and"},{"cve":"CVE-2011-3592","epss":0.0145,"slug":"cve-2011-3592-phpmyadmin-multiple-xss-vulnerabilities","title":"phpMyAdmin Multiple XSS Vulnerabilities","severity":"info","exploited":false,"published_at":"2022-05-17T04:19:07+00:00","url":"https://junglewise.ai/threats/cve-2011-3592-phpmyadmin-multiple-xss-vulnerabilities"},{"cve":"CVE-2016-2559","cvss":3,"epss":0.0171,"slug":"cve-2016-2559-phpmyadmin-cross-site-scripting-xss-vulnerability-in-sql-parser","title":"phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser","severity":"low","exploited":false,"published_at":"2022-05-17T03:31:15+00:00","url":"https://junglewise.ai/threats/cve-2016-2559-phpmyadmin-cross-site-scripting-xss-vulnerability-in-sql-parser"},{"cve":"CVE-2016-2562","cvss":3,"epss":0.0078,"slug":"cve-2016-2562-phpmyadmin-improper-input-validation","title":"phpMyAdmin Improper Input Validation","severity":"low","exploited":false,"published_at":"2022-05-17T03:31:14+00:00","url":"https://junglewise.ai/threats/cve-2016-2562-phpmyadmin-improper-input-validation"},{"cve":"CVE-2016-5732","cvss":3,"epss":0.0164,"slug":"cve-2016-5732-phpmyadmin-xss-vulnerability","title":"phpMyAdmin XSS Vulnerability","severity":"low","exploited":false,"published_at":"2022-05-17T02:37:29+00:00","url":"https://junglewise.ai/threats/cve-2016-5732-phpmyadmin-xss-vulnerability"},{"cve":"CVE-2016-5702","cvss":3,"epss":0.0169,"slug":"cve-2016-5702-phpmyadmin-cookie-attribute-injection","title":"phpMyAdmin cookie-attribute injection","severity":"low","exploited":false,"published_at":"2022-05-17T02:37:29+00:00","url":"https://junglewise.ai/threats/cve-2016-5702-phpmyadmin-cookie-attribute-injection"},{"cve":"CVE-2016-5704","cvss":3,"epss":0.0164,"slug":"cve-2016-5704-phpmyadmin-xss-vulnerability","title":"phpMyAdmin XSS Vulnerability","severity":"low","exploited":false,"published_at":"2022-05-17T02:37:29+00:00","url":"https://junglewise.ai/threats/cve-2016-5704-phpmyadmin-xss-vulnerability"},{"cve":"CVE-2016-6608","cvss":3,"epss":0.0128,"slug":"cve-2016-6608-phpmyadmin-cross-site-scripting-xss","title":"phpMyAdmin Cross-site Scripting (XSS)","severity":"low","exploited":false,"published_at":"2022-05-17T02:37:28+00:00","url":"https://junglewise.ai/threats/cve-2016-6608-phpmyadmin-cross-site-scripting-xss"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"wwbn/avideo (Packagist)","slug":"wwbn-avideo","vulnerabilities":169,"url":"https://junglewise.ai/threats/technologies/wwbn-avideo"},{"name":"getgrav/grav (Packagist)","slug":"getgrav-grav","vulnerabilities":144,"url":"https://junglewise.ai/threats/technologies/getgrav-grav"},{"name":"thorsten/phpmyfaq (Packagist)","slug":"thorsten-phpmyfaq","vulnerabilities":138,"url":"https://junglewise.ai/threats/technologies/thorsten-phpmyfaq"},{"name":"pimcore/pimcore (Packagist)","slug":"pimcore-pimcore","vulnerabilities":136,"url":"https://junglewise.ai/threats/technologies/pimcore-pimcore"},{"name":"dolibarr/dolibarr (Packagist)","slug":"dolibarr-dolibarr","vulnerabilities":125,"url":"https://junglewise.ai/threats/technologies/dolibarr-dolibarr"},{"name":"drupal/core (Packagist)","slug":"packagist-drupal-core","vulnerabilities":116,"url":"https://junglewise.ai/threats/technologies/packagist-drupal-core"},{"name":"librenms/librenms (Packagist)","slug":"librenms-librenms","vulnerabilities":113,"url":"https://junglewise.ai/threats/technologies/librenms-librenms"},{"name":"microweber/microweber (Packagist)","slug":"microweber-microweber","vulnerabilities":106,"url":"https://junglewise.ai/threats/technologies/microweber-microweber"},{"name":"concrete5/concrete5 (Packagist)","slug":"concrete5-concrete5","vulnerabilities":93,"url":"https://junglewise.ai/threats/technologies/concrete5-concrete5"},{"name":"craftcms/cms (Packagist)","slug":"craftcms-cms","vulnerabilities":90,"url":"https://junglewise.ai/threats/technologies/craftcms-cms"},{"name":"snipe/snipe-it (Packagist)","slug":"snipe-snipe-it","vulnerabilities":80,"url":"https://junglewise.ai/threats/technologies/snipe-snipe-it"},{"name":"phpmyfaq/phpmyfaq (Packagist)","slug":"phpmyfaq-phpmyfaq","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/phpmyfaq-phpmyfaq"}],"technology":{"hub":true,"name":"phpmyadmin/phpmyadmin (Packagist)","slug":"phpmyadmin-phpmyadmin","vendor":{"name":"Packagist","slug":"packagist","url":"https://junglewise.ai/threats/vendors/packagist"},"aliases":[],"url":"https://junglewise.ai/threats/technologies/phpmyadmin-phpmyadmin"},"most_severe":[{"cve":"CVE-2011-4634","cvss":4,"epss":0.0213,"slug":"cve-2011-4634-phpmyadmin-vulnerable-to-cross-site-scripting","title":"phpMyAdmin vulnerable to Cross-site Scripting","severity":"medium","exploited":false,"published_at":"2022-05-17T05:19:13+00:00","url":"https://junglewise.ai/threats/cve-2011-4634-phpmyadmin-vulnerable-to-cross-site-scripting"},{"cve":"CVE-2010-4481","cvss":4,"epss":0.0202,"slug":"cve-2010-4481-phpmyadmin-allows-remote-attackers-to-bypass-authentication-and","title":"phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information","severity":"medium","exploited":false,"published_at":"2022-05-17T05:44:04+00:00","url":"https://junglewise.ai/threats/cve-2010-4481-phpmyadmin-allows-remote-attackers-to-bypass-authentication-and"},{"cve":"CVE-2010-2958","cvss":4,"epss":0.019,"slug":"cve-2010-2958-phpmyadmin-cross-site-scripting-vulnerability","title":"phpMyAdmin Cross-site Scripting vulnerability","severity":"medium","exploited":false,"published_at":"2022-05-17T05:48:25+00:00","url":"https://junglewise.ai/threats/cve-2010-2958-phpmyadmin-cross-site-scripting-vulnerability"},{"cve":"CVE-2011-4782","cvss":4,"epss":0.0125,"slug":"cve-2011-4782-phpmyadmin-cross-site-scripting-vulnerability","title":"phpMyAdmin Cross-site Scripting vulnerability","severity":"medium","exploited":false,"published_at":"2022-05-17T01:51:40+00:00","url":"https://junglewise.ai/threats/cve-2011-4782-phpmyadmin-cross-site-scripting-vulnerability"},{"cve":"CVE-2018-12613","cvss":3.1,"epss":0.9835,"slug":"cve-2018-12613-phpmyadmin-improper-authentication","title":"phpMyAdmin Improper Authentication","severity":"low","exploited":false,"published_at":"2022-05-13T01:05:22+00:00","url":"https://junglewise.ai/threats/cve-2018-12613-phpmyadmin-improper-authentication"},{"cve":"CVE-2019-12922","cvss":3.1,"epss":0.1014,"slug":"cve-2019-12922-phpmyadmin-cross-site-request-forgery-csrf","title":"phpMyAdmin Cross-Site Request Forgery (CSRF)","severity":"low","exploited":false,"published_at":"2022-05-24T22:00:34+00:00","url":"https://junglewise.ai/threats/cve-2019-12922-phpmyadmin-cross-site-request-forgery-csrf"},{"cve":"CVE-2013-3239","cvss":3.1,"epss":0.0875,"slug":"cve-2013-3239-phpmyadmin-remote-code-execution","title":"phpMyAdmin Remote Code Execution","severity":"low","exploited":false,"published_at":"2022-05-17T04:58:08+00:00","url":"https://junglewise.ai/threats/cve-2013-3239-phpmyadmin-remote-code-execution"},{"cve":"CVE-2022-23808","cvss":3.1,"epss":0.0794,"slug":"cve-2022-23808-cross-site-scripting-in-phpmyadmin","title":"Cross-site Scripting in phpmyadmin","severity":"low","exploited":false,"published_at":"2022-01-28T22:36:28+00:00","url":"https://junglewise.ai/threats/cve-2022-23808-cross-site-scripting-in-phpmyadmin"},{"cve":"CVE-2019-19617","cvss":3.1,"epss":0.0259,"slug":"cve-2019-19617-phpmyadmin-unsanitized-git-information","title":"phpMyAdmin unsanitized Git information","severity":"low","exploited":false,"published_at":"2022-05-24T17:02:49+00:00","url":"https://junglewise.ai/threats/cve-2019-19617-phpmyadmin-unsanitized-git-information"},{"cve":"CVE-2019-18622","cvss":3.1,"epss":0.0224,"slug":"cve-2019-18622-sql-injection-in-phpmyadmin","title":"SQL injection in phpMyAdmin","severity":"low","exploited":false,"published_at":"2020-01-16T21:56:15+00:00","url":"https://junglewise.ai/threats/cve-2019-18622-sql-injection-in-phpmyadmin"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}