Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Phpmoadmin Component: Phpmoadmin Clear all filters
TI-2019-15507 CVE-2019-25454 · GHSA-2h8m-3jwj-j68m

phpMoAdmin 1.1.5 Stored Cross-Site Scripting via collection Parameter

Priority MEDIUM 57

phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00291 Published 2026-02-20 No fix listed CWE-79
TI-2019-15506 CVE-2019-25453 · GHSA-hc96-x3gj-mp7g

phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php

Priority MEDIUM 56

phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00338 Published 2026-02-20 No fix listed CWE-79
TI-2019-15504 CVE-2019-25451 · GHSA-fhrj-59h8-j7gf

phpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php

Priority MEDIUM 57

phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0038 Published 2026-02-20 No fix listed CWE-918