5MMISSI-CVE-2017-1000499

5MMISSI-CVE-2017-1000499 PoC of CVE-2017-1000499 phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

phpmyadmin4.4_cve-2016-5734

This repository does not have a README...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 Remote Code Execution Vulnerability CVE-2016-5734 Setup git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 exploit python3 cve-2016-5734.py -u root --pwd="root"...

CVE-2018-1263-Demo

Exploit Demo This guide will help you to install vulnerable component and perform the attack related to phpMyAdmin bug mentioned in CVE-2018-1263. Description of CVE Why does the vulnerability exist How does the attack work How to install vulnerable component How to perform the attack Description...

phpmyadmin-importldi

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-importldi Write-up: https://abraxaslabs.tech/research/phpmyadmin-importldi phpmyadmin-importldi Class: SQLi Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e - phpMyAdmin ImportLdi.php builds LOAD DATA wi...

PMA-5.2.3-WebAuthn-2FA

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · PMA-5.2.3-WebAuthn-2FA PMA-5.2.3-WebAuthn-2FA phpMyAdmin 5.2.3 - phpMyAdmin Default tarball. web-auth/webauthn-lib is suggest / require-dev. composer install --no-dev does not install it. createServer therefore uses...

phpmyadmin-vqb-xss

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-vqb-xss Write-up: https://abraxaslabs.tech/research/phpmyadmin-vqb-xss phpmyadmin-vqb-xss Class: Stored XSS Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e - phpMyAdmin js/src/designer/history.js builds...

CVE-2018-12613

CVE-2018-12613 Local file inclusion bug due to filter bypass using %253f character. Software Affected 1. PHPMyAdmin v.4.8.0 2. PHPMyAdmin v.4.8.1 How to use This PowerShell scripts need three parameters to craft a exploit HTTP request: 1. PHPMyAdmin URL endpoint 2. Cookies for an authenticated us...

CVE-2026-121262

A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected element is the function parse of the file src/Statements/ExplainStatement.php. Performing a manipulation of the argument nextToken results in incorrect type conversion. The attack is possible to be carried out remotely...

CVE-2026-121263

A flaw was found in phpMyAdmin MoTranslator. This flaw allows a remote attacker to perform path traversal by supplying a manipulated locale argument to the Loader::getTranslator function. Successful exploitation may allow unauthorized access to files outside the intended translation directory...

CVE-2026-121262

A flaw was found in phpMyAdmin's SQL parser. An improper type conversion vulnerability exists in the EXPLAIN statement parser when processing specific token arguments. A remote attacker can exploit this flaw by submitting a specially crafted SQL query, leading to an unhandled exception and causin...

CVE-2026-121261

A flaw was found in phpMyAdmin ShapeFile. A remote attacker could exploit this vulnerability by providing a specially crafted shapefile for processing. When parsed by the ShapeRecord::loadFromFile function, the malicious input triggers an infinite loop, leading to excessive resource consumption a...

Linux Distros Unpatched Vulnerability : CVE-2026-121261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is the function ShapeRecord::loadFromFile of the component SHP File Handler. Such...

Linux Distros Unpatched Vulnerability : CVE-2026-121262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected element is the function parse of the file src/Statements/ExplainStatement.php...

Linux Distros Unpatched Vulnerability : CVE-2026-121263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in phpMyAdmin MoTranslator up to 6.0.1. The impacted element is the function Loader::getTranslator of the file...

CVE-2026-119427

phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting that allows authenticated users to inject SQL via unescaped jsonencode output. Attackers can send crafted index or value parameters with operation=savesettingvalue to /database/designer to overwrite other...

CVE-2026-119428

phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound connections via setup/validate.php, which lacks the setup-disabled guard. Attackers can POST attacker-chosen host and port values reaching...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-php-fpm-rce - unauthenticated RCE exploit for PHP-FP...

CVE-2026-121263

A vulnerability was determined in phpMyAdmin MoTranslator up to 6.0.1. The impacted element is the function Loader::getTranslator of the file motranslator-master/src/Loader.php. Executing a manipulation of the argument locale can lead to path traversal. The attack may be performed from remote. Th...

CVE-2026-121262

A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected element is the function parse of the file src/Statements/ExplainStatement.php. Performing a manipulation of the argument nextToken results in incorrect type conversion. The attack is possible to be carried out remotely...