A new version of phpMyAdmin has been released to plug two serious security holes that could lead to SQL injection and cross-site scripting attacks. According to an advisory from the maintainers of the ...

Some information can be found in the phpMyAdmin security announcement: A logged-in user can be subject of SQL injection through cross site request forgery. Several scripts in phpMyAdmin are vulnerable ...

Richard Cunningham reported that phpMyAdmin uses the $_REQUEST variable of $_GET and $_POST as a source for its parameters. An attacker could entice a user to visit a malicious web application that ...

Das Bundesamt für Sicherheit in der Informationstechnik (BSI) hat am 02.12.2025 ein Update zu einer am 07.01.2020 bekanntgewordenen Sicherheitslücke für phpMyAdmin veröffentlicht. Betroffen von der Si ...