6911 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-119563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped...
Linux Distros Unpatched Vulnerability : CVE-2026-119561
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse that never verifies WebAuthn asserti...
SUSE CVE-2026-119426
phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute arbitrary SQL by bypassing CSRF token checks on non-AJAX POST requests. Attackers can lure authenticated victims into submitting cross-site POSTs carrying sqlquery to /sql or...
SUSE CVE-2026-119427
phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer saveSetting that allows authenticated users to inject SQL via unescaped jsonencode output. Attackers can send crafted index or value parameters with operation=savesettingvalue to /database/designer to overwrite other...
SUSE CVE-2026-119428
phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound connections via setup/validate.php, which lacks the setup-disabled guard. Attackers can POST attacker-chosen host and port values reaching...
SUSE CVE-2026-119429
phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remove two-factor authentication by posting the 2fa key to /config/set. Attackers holding a hijacked session can submit key=2fa with a null JSON value to SetConfigController, strippi...
SUSE CVE-2026-119561
phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse that never verifies WebAuthn assertion signatures against stored public keys. Attackers holding a victim's MySQL credentials can POST a crafted webauthnrequestresponse with...
SUSE CVE-2026-119562
phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped colextra and colattribute values to /database/central-columns. Attackers can inject SQL into pmacentralcolumns INSERT and UPDATE queries run with controluser...
SUSE CVE-2026-119563
phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display. Attackers can create a table whose name contains HTML markup that executes in another user's sessio...
CLEANSTART-2025-IT25162 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-OB79847 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-VZ71155 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-IF10536 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-UT60172 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-HU87078 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-SI46098 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-FW64927 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-ZO09680 issue was discovered in phpMyAdmin
Security vulnerability affects the phpmyadmin package. An issue was discovered in phpMyAdmin...
CLEANSTART-2025-RU09381 XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10
Security vulnerability affects the phpmyadmin package. An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10...