https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:19:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-01545 bdu:2018-01545 https://cve.radiocsirt.org/vuln/bdu:2018-01545 https://cve.radiocsirt.org/vuln/certfr-2018-avi-300 certfr-2018-avi-300 https://cve.radiocsirt.org/vuln/certfr-2018-avi-300 https://cve.radiocsirt.org/vuln/cnvd-2018-23761 cnvd-2018-23761 https://cve.radiocsirt.org/vuln/cnvd-2018-23761 https://cve.radiocsirt.org/vuln/euvd-2026-65938 EUVD-2026-65938 https://cve.radiocsirt.org/vuln/euvd-2026-65938 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12613 <p>An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the &#34;$cfg[&#39;AllowArbitraryServer&#39;] = true&#34; case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the &#34;$cfg[&#39;ServerDefault&#39;] = 0&#34; case (which bypasses the login requirement and runs the vulnerable code without any authentication).</p> <p>An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the &#34;$cfg[&#39;AllowArbitraryServer&#39;] = true&#34; case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the &#34;$cfg[&#39;ServerDefault&#39;] = 0&#34; case (which bypasses the login requirement and runs the vulnerable code without any authentication).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-12613 https://cve.radiocsirt.org/vuln/ghsa-x394-g9j8-x7mf <p><strong>Affected:</strong> Packagist: phpmyadmin/phpmyadmin</p> <p>An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the &#34;$cfg[&#39;AllowArbitraryServer&#39;] = true&#34; case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the &#34;$cfg[&#39;ServerDefault&#39;] = 0&#34; case (which bypasses the login requirement and runs the vulnerable code without any authentication).</p> <p><strong>Affected:</strong> Packagist: phpmyadmin/phpmyadmin</p> <p>An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the &#34;$cfg[&#39;AllowArbitraryServer&#39;] = true&#34; case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the &#34;$cfg[&#39;ServerDefault&#39;] = 0&#34; case (which bypasses the login requirement and runs the vulnerable code without any authentication).</p> https://cve.radiocsirt.org/vuln/ghsa-x394-g9j8-x7mf https://cve.radiocsirt.org/vuln/gsd-2018-12613 gsd-2018-12613 https://cve.radiocsirt.org/vuln/gsd-2018-12613 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11171-1 <p>phpMyAdmin-5.1.1-1.2 on GA media</p> <p>phpMyAdmin-5.1.1-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11171-1