Skip to content

Phpmyadmin · weakness class

Cross-site Scripting

83 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

check available
1

Every one of the 83 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. phpMyAdmin < 5.1.2 - Cross-Site ScriptingCVE-2022-23808Phpmyadmin · CVSS 6.1 · 7.9% likely

    CWE-79

  2. Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HT…CVE-2013-1937Phpmyadmin · 6.3% likely

    CWE-79

  3. Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11.9.2 and 3.0.1, when register_globals is enabled, allows rem…CVE-2008-4775Phpmyadmin · 6.1% likely

    CWE-79

  4. error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted BBcode tag containing "…CVE-2010-4480Phpmyadmin · 5.8% likely

    CWE-79

  5. Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via (1) the strServer, cfg[BgcolorOne], or strServerCh…CVE-2005-0543Phpmyadmin · 4.0% likely

    CWE-79

  6. Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in (1)…CVE-2007-5589Phpmyadmin · 3.3% likely

    CWE-79

  7. Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that does not URL-encode requests, allows remote attackers to inject…CVE-2007-5386Phpmyadmin · 3.3% likely

    CWE-79

  8. Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via (1) a comment for a table name,…CVE-2006-6942Phpmyadmin · 3.3% likely

    CWE-79

  9. Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrar…CVE-2016-2560Phpmyadmin · 2.7% likely

    CWE-79

  10. Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to inject arbitrary web script or HTML via…CVE-2010-3056Phpmyadmin · 2.7% likely

    CWE-79

  11. Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.11.x before 2.11.9.6 and 3.x before 3.2.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted n…CVE-2009-3696Phpmyadmin · 2.6% likely

    CWE-79

  12. Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and…CVE-2010-4329Phpmyadmin · 2.5% likely

    CWE-79

  13. Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or…CVE-2016-2561Phpmyadmin · 2.5% likely

    CWE-79

  14. Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2.x before 4.2.12 allow remote authenticated users to inject…CVE-2014-8958Phpmyadmin · 2.4% likely

    CWE-79

  15. Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary w…CVE-2011-3181Phpmyadmin · 2.3% likely

    CWE-79

  16. In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.CVE-2018-19970Phpmyadmin · 2.2% likely

    CWE-79

  17. Cross-site scripting (XSS) vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to i…CVE-2012-1190Phpmyadmin · 2.2% likely

    CWE-79

  18. Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary…CVE-2016-5733Phpmyadmin · 2.2% likely

    CWE-79

  19. Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.1.x before 4.1.14.1 and 4.2.x before 4.2.4 allow remote authenticated users to inject arbitrary web script or H…CVE-2014-4349Phpmyadmin · 2.1% likely

    CWE-79

  20. Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.x before 2.8.0.4 allows remote attackers to inject arbitrary web script or HTML via the theme parameter in unknown scr…CVE-2006-2417Phpmyadmin · 2.1% likely

    CWE-79

  21. Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted database name,…CVE-2011-4634Phpmyadmin · 2.1% likely

    CWE-79

  22. Cross-site scripting (XSS) vulnerability in the setup interface in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to inject arbitrary web script or HTML via a crafted value.CVE-2011-4064Phpmyadmin · 2.0% likely

    CWE-79

  23. Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.CVE-2009-2284Phpmyadmin · 2.0% likely

    CWE-79

  24. phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.CVE-2020-26934Phpmyadmin · 1.9% likely

    CWE-79

  25. Cross-site scripting (XSS) vulnerability in libraries/Error.class.php in phpMyAdmin 3.x before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors rel…CVE-2010-2958Phpmyadmin · 1.9% likely

    CWE-79

  26. The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is used, allows remote attackers to bypass cross-site scriptin…CVE-2008-4326Phpmyadmin · 1.9% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in