| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin | ≤ 5.2.3 |
phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound connections via setup/validate.php, which lacks the setup-disabled guard. Attackers can POST attacker-chosen host and port values reaching Validator::testDBConnection() to open MySQL-protocol connections and probe internal ports using returned error messages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free