Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

Database Management

phpMyAdmin

phpMyAdmin is a free software tool written in PHP intended to handle the administration of MySQL over the Web. phpMyAdmin supports a wide range of operations on MySQL and MariaDB. Frequently used operations (managing databases tables columns relations indexes users permissions etc) can be performed via the user interface while you still have the ability to directly execute any SQL statement.

Official Site:

https://www.phpmyadmin.net/

Severity Summary:

Critical: 19 High: 47 Medium: 167 Low: 30
Reference
Title
Severity
CVE-2008-7251
phpMyAdmin Permissions Privileges and Access Controls Vulnerability
Critical
CVE-2020-22452
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2016-9865
phpMyAdmin 7PK - Security Features Vulnerability
Critical
CVE-2007-0203
phpMyAdmin Other Vulnerability
Critical
CVE-2016-5734
phpMyAdmin Improper Control of Generation of Code (Code Injection) Vulnerability
Critical
CVE-2016-6629
phpMyAdmin 7PK - Security Features Vulnerability
Critical
CVE-2019-11768
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2004-1147
phpMyAdmin Other Vulnerability
Critical
CVE-2019-18622
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2016-6620
phpMyAdmin Deserialization of Untrusted Data Vulnerability
Critical
CVE-2016-9849
phpMyAdmin Permissions Privileges and Access Controls Vulnerability
Critical
CVE-2020-26935
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2016-5703
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2019-19617
phpMyAdmin Vulnerability
Critical
CVE-2016-9866
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability
Critical
CVE-2017-18264
phpMyAdmin Vulnerability
Critical
CVE-2009-1151
phpMyAdmin Improper Control of Generation of Code (Code Injection) Vulnerability
Critical
CVE-2019-6798
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Critical
CVE-2008-7252
phpMyAdmin Cryptographic Issues Vulnerability
Critical
CVE-2016-5706
phpMyAdmin Resource Management Errors Vulnerability
High
CVE-2016-1927
phpMyAdmin 7PK - Security Features Vulnerability
High
CVE-2016-2041
phpMyAdmin 7PK - Security Features Vulnerability
High
CVE-2016-5739
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2006-1804
phpMyAdmin Other Vulnerability
High
CVE-2016-6606
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
High
CVE-2016-6611
phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2017-1000014
phpMyAdmin Improper Input Validation Vulnerability
High
CVE-2001-0478
phpMyAdmin Other Vulnerability
High
CVE-2016-6621
phpMyAdmin Server-Side Request Forgery (SSRF) Vulnerability
High
CVE-2017-1000016
phpMyAdmin Improper Input Validation Vulnerability
High