Phpmoadmin
Approved changes feed: RSS · Atom
cpe:2.3:a:phpmoadmin:phpmoadmin:1.1.5:*:*:*:*:*:*:*part: a version: 1.1.5 update: *
| Vendor | Phpmoadmin (58dc28b7-00ad-54c1-a9a2-84ac5e532372) |
|---|---|
| Product | Phpmoadmin (5ec50dd9-3127-5a57-bf49-9761bc5aa167) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25454 |
vulnerable | 2026-06-08 05:13:42.393454 |
phpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter
MEDIUM (6.1)
phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection creation to execute arbitrary JavaScript in users' browsers.
Published: 2026-02-20T22:57:02.824Z
Updated: 2026-04-07T14:04:15.724Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25453 |
vulnerable | 2026-06-08 05:13:42.393121 |
phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php
MEDIUM (6.1)
phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter. Attackers can craft URLs with JavaScript payloads in the newdb parameter of moadmin.php to execute arbitrary code in users' browsers when they visit the malicious link.
Published: 2026-02-20T22:57:01.837Z
Updated: 2026-04-07T14:04:14.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25451 |
vulnerable | 2026-06-08 05:13:42.392329 |
phpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php
HIGH (8.8)
phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests. Attackers can trick authenticated users into submitting GET requests to moadmin.php with parameters like action, db, and collection to create, drop, or repair databases and collections without user consent.
Published: 2026-02-20T22:57:00.942Z
Updated: 2026-04-07T14:04:13.298Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.