phpMYAdmin 4.5.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1:*:*:*:*:*:*:*part: a version: 4.5.0.1 update: *
| Vendor | Phpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745) |
|---|---|
| Product | Phpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/phpmyadmin/phpmyadmin |
purl2cpe | 2026-06-01 10:12:58.304933 |
pkg:docker/phpmyadmin/phpmyadmin |
purl2cpe | 2026-06-01 10:12:58.304935 |
pkg:github/phpmyadmin/phpmyadmin |
purl2cpe | 2026-06-01 10:12:58.304936 |
pkg:rpm/fedora/phpmyadmin |
purl2cpe | 2026-06-01 10:12:58.304937 |
pkg:rpm/opensuse/phpmyadmin |
purl2cpe | 2026-06-01 10:12:58.304939 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-2562 |
vulnerable | 2026-06-08 05:07:42.643923 |
Details available
The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.
Published: 2016-03-01T11:00:00.000Z
Updated: 2024-08-05T23:32:20.950Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2561 |
vulnerable | 2026-06-08 05:07:42.643190 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) normalization.php or (2) js/normalization.js in the database normalization page, (3) templates/database/structure/sortable_header.phtml in the database structure page, or (4) the pos parameter to db_central_columns.php in the central columns page.
Published: 2016-03-01T11:00:00.000Z
Updated: 2024-08-05T23:32:21.021Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2560 |
vulnerable | 2026-06-08 05:07:42.641700 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Host HTTP header, related to libraries/Config.class.php; (2) crafted JSON data, related to file_echo.php; (3) a crafted SQL query, related to js/functions.js; (4) the initial parameter to libraries/server_privileges.lib.php in the user accounts page; or (5) the it parameter to libraries/controllers/TableSearchController.class.php in the zoom search page.
Published: 2016-03-01T11:00:00.000Z
Updated: 2024-08-05T23:32:21.007Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2559 |
vulnerable | 2026-06-08 05:07:42.607729 |
Details available
Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.
Published: 2016-03-01T11:00:00.000Z
Updated: 2024-08-05T23:32:20.791Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2045 |
vulnerable | 2026-06-08 05:07:32.693027 |
Details available
Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response.
Published: 2016-02-20T01:00:00.000Z
Updated: 2024-08-05T23:17:49.970Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2044 |
vulnerable | 2026-06-08 05:07:32.692455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2043 |
vulnerable | 2026-06-08 05:07:32.691799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2042 |
vulnerable | 2026-06-08 05:07:32.690381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2041 |
vulnerable | 2026-06-08 05:07:32.689309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2040 |
vulnerable | 2026-06-08 05:07:32.687789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2039 |
vulnerable | 2026-06-08 05:07:32.685705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2038 |
vulnerable | 2026-06-08 05:07:32.684198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1927 |
vulnerable | 2026-06-08 05:07:32.363411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8669 |
vulnerable | 2026-06-08 05:07:04.671684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7873 |
vulnerable | 2026-06-08 05:07:02.226976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.