Phpmoadmin Phpmoadmin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phpmoadmin Phpmoadmin: 3 record(s), with affected versions and fixes.cpe:2.3:a:phpmoadmin:phpmoadmin
CVE-2019-25454
Medium · 6.1
CWE-79 Feb 20, 2026
phpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter
phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection creation to execute arbitrary JavaScript in users' browsers.
CVE-2019-25453
Medium · 6.1
CWE-79 Feb 20, 2026
phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php
phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter. Attackers can craft URLs with JavaScript payloads in the newdb parameter of moadmin.php to execute arbitrary code in users' browsers when they visit the malicious link.
CVE-2019-25451
High · 8.8
CWE-918 Feb 20, 2026
phpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php
phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests. Attackers can trick authenticated users into submitting GET requests to moadmin.php with parameters like action, db, and collection to create, drop, or repair databases and collections without user consent.