Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:4.3.13:*:*:*:*:*:*:*

part: a version: 4.3.13 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304623
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304624
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304626
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.304628
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.304629

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-3903 vulnerable 2026-06-08 05:06:38.768923 Details available
libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables X.509 certificate verification for GitHub API calls over SSL, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2015-05-26T15:00:00.000Z
Updated: 2024-08-06T05:56:16.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3902 vulnerable 2026-06-08 05:06:38.763827 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configuration file.
Published: 2015-05-26T15:00:00.000Z
Updated: 2024-08-06T05:56:16.060Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.