phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-10188 · ADVISORY
• phpmyadmin/phpmyadmin commit c6dd6b5 · WEB
• phpmyadmin/composer · PACKAGE
• exploit-db.com/exploits/44496 · WEB
• phpmyadmin.net/security/PMASA-2018-2 · WEB
• securityfocus.com/bid/103936 · WEB
• securitytracker.com/id/1040752 · WEB
• exploit-db.com/exploits/44496 · Exploit
• phpmyadmin.net/security/PMASA-2018-2 · Vendor Advisory

Autres vulnérabilités de phpmyadmin/phpmyadmin

• CVE-2025-24530MOYENNE 6.4An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted tab…
• CVE-2023-25727MOYENNE 5.4In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-an…
• CVE-2020-22452CRITIQUE 9.8SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engin…
• CVE-2022-0813ÉLEVÉE 7.5PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the …
• CVE-2022-23808MOYENNE 6.1An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can al…