Read the docs

Phpmoadmin

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Phpmoadmin records in CISA KEV

No Phpmoadmin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phpmoadmin 3 records MEDIUM

Records

3 records in Phpmoadmin · all components

TI-2019-15507 CVE-2019-25454 · GHSA-2h8m-3jwj-j68m

phpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter

Priority MEDIUM 57

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00291 Published 2026-02-20 No fix listed CWE-79
TI-2019-15504 CVE-2019-25451 · GHSA-fhrj-59h8-j7gf

phpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php

Priority MEDIUM 57

phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0038 Published 2026-02-20 No fix listed CWE-918
TI-2019-15506 CVE-2019-25453 · GHSA-hc96-x3gj-mp7g

phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php

Priority MEDIUM 56

phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00338 Published 2026-02-20 No fix listed CWE-79
Open these records in search →