Cryptography

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors.CVE-2008-7252Phpmyadmin · 2.7% likely

   CWE-310

2. An issue was discovered in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpMyAdmin generates one at runtime. A vulnerability was report…CVE-2016-9847Phpmyadmin · 2.0% likely

   CWE-310

3. libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disables X.509 certificate verification for…CVE-2015-3903Phpmyadmin · 1.6% likely

   CWE-310

4. phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to…CVE-2008-1567Phpmyadmin · 0.3% likely

   CWE-312

5. phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServerCVE-2026-119561phpMyAdmin · CVSS 6.8 · 0.2% likelycovered by CyberSIXT

   CWE-3471 article

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.