Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:4.3.12:*:*:*:*:*:*:*

part: a version: 4.3.12 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304616
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304617
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304619
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.304620
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.304621

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-6830 vulnerable 2026-06-08 05:06:53.126267 Details available
libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha.
Published: 2015-09-14T01:00:00.000Z
Updated: 2024-08-06T07:36:33.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3903 vulnerable 2026-06-08 05:06:38.768906 Details available
libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables X.509 certificate verification for GitHub API calls over SSL, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2015-05-26T15:00:00.000Z
Updated: 2024-08-06T05:56:16.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3902 vulnerable 2026-06-08 05:06:38.763370 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configuration file.
Published: 2015-05-26T15:00:00.000Z
Updated: 2024-08-06T05:56:16.060Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.