Vulnerability Database · Packagist · phpmyadmin/phpmyadmin · Version
phpmyadmin/phpmyadmin 4.8.5
4.8.5 is affected by 9 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 3 High 2 Medium 4 Low 0 Unrated 0
-
Database updated 22/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
phpmyadmin/phpmyadmin 4.8.5 vulnerabilities
9 vulnerabilities cover phpmyadmin/phpmyadmin 4.8.5. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2019-19617: phpMyAdmin unsanitized Git information | 9.8 critical | 4.9.2 | 24 May 2022 |
| CVE-2019-11768: phpMyAdmin SQL injection in Designer feature | 9.8 critical | 4.9.0.1 | 24 May 2022 |
| CVE-2019-18622: SQL injection in phpMyAdmin | 9.8 critical | 4.9.2 | 16 Jan 2020 |
| CVE-2020-5504: phpMyAdmin SQL injection in user accounts page | 8.8 high | 4.9.4 | 24 May 2022 |
| CVE-2022-0813: Exposure of Sensitive Information in PhpMyAdmin | 7.5 high | 5.1.3 | 11 Mar 2022 |
| CVE-2019-12922: phpMyAdmin Cross-Site Request Forgery (CSRF) | 6.5 medium | 4.9.1 | 24 May 2022 |
| CVE-2019-12616: phpMyAdmin CSRF Vulnerability | 6.5 medium | 4.9.0 | 24 May 2022 |
| CVE-2023-25727: XSS vulnerability in drag-and-drop upload of phpMyAdmin | 5.4 medium | 4.9.11 | 13 Feb 2023 |
| CVE-2020-10803: phpMyAdmin SQL injection vulnerability | 5.4 medium | 4.9.5 | 24 May 2022 |
Looking for another version, or everything Vulert holds for phpmyadmin/phpmyadmin?
Questions
About phpmyadmin/phpmyadmin 4.8.5
Is phpmyadmin/phpmyadmin 4.8.5 vulnerable?
Yes. 9 vulnerabilities in the Vulert database cover phpmyadmin/phpmyadmin 4.8.5: 3 critical, 2 high, 4 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor phpmyadmin/phpmyadmin for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the phpmyadmin/phpmyadmin version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.