Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:4.2.13.2:*:*:*:*:*:*:*

part: a version: 4.2.13.2 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304494
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304496
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304497
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.304498
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.304500

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-3903 vulnerable 2026-06-08 05:06:38.768682 Details available
libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables X.509 certificate verification for GitHub API calls over SSL, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2015-05-26T15:00:00.000Z
Updated: 2024-08-06T05:56:16.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3902 vulnerable 2026-06-08 05:06:38.757111 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configuration file.
Published: 2015-05-26T15:00:00.000Z
Updated: 2024-08-06T05:56:16.060Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.