Approved changes feed: RSS · Atom

cpe:2.3:a:phpredisadmin_project:phpredisadmin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpredisadmin Project (1077c526-e32a-5743-aec5-072d60886525)
ProductPhpredisadmin (6b6ef0e4-b732-5ccc-9cad-1fd7058bc4aa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/erikdubbelboer/phpredisadmin purl2cpe 2026-06-01 10:15:40.863849
pkg:github/erikdubbelboer/phpredisadmin purl2cpe 2026-06-01 10:15:40.863851

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4268 vulnerable 2026-06-08 05:38:09.066118 phpRedisAdmin cross-site request forgery
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.18.0 is able to address this issue. The name of the patch is b9039adbb264c81333328faa9575ecf8e0d2be94. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216471.
Published: 2022-12-21T00:00:00.000Z
Updated: 2025-04-14T17:29:52.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4259 vulnerable 2026-06-08 05:38:09.047400 phpRedisAdmin login.inc.php authHttpDigest wrong operator in string comparison
MEDIUM (5)
A vulnerability was found in phpRedisAdmin up to 1.16.1. It has been classified as problematic. This affects the function authHttpDigest of the file includes/login.inc.php. The manipulation of the argument response leads to use of wrong operator in string comparison. Upgrading to version 1.16.2 is able to address this issue. The name of the patch is 31aa7661e6db6f4dffbf9a635817832a0a11c7d9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216267.
Published: 2022-12-19T00:00:00.000Z
Updated: 2024-08-03T17:23:10.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27163 vulnerable 2026-06-08 05:23:52.174584 Details available
phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter.
Published: 2020-10-16T02:06:50.000Z
Updated: 2024-08-04T16:11:35.903Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.