Vulnerability Database · Packagist · phpmyadmin/phpmyadmin · Version
phpmyadmin/phpmyadmin 4.9.2
4.9.2 is affected by 9 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 1 High 4 Medium 4 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
phpmyadmin/phpmyadmin 4.9.2 vulnerabilities
9 vulnerabilities cover phpmyadmin/phpmyadmin 4.9.2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2020-26935: phpMyAdmin SQL injection vulnerability | 9.8 critical | 4.9.6 | 24 May 2022 |
| CVE-2020-5504: phpMyAdmin SQL injection in user accounts page | 8.8 high | 4.9.4 | 24 May 2022 |
| CVE-2020-10804: phpMyAdmin SQL Injection | 8.0 high | 4.9.5 | 24 May 2022 |
| CVE-2020-10802: phpMyAdmin SQL injection vulnerability | 8.0 high | 4.9.5 | 24 May 2022 |
| CVE-2022-0813: Exposure of Sensitive Information in PhpMyAdmin | 7.5 high | 5.1.3 | 11 Mar 2022 |
| CVE-2020-26934: phpMyAdmin Cross-site Scripting (XSS) | 6.1 medium | 4.9.6 | 24 May 2022 |
| CVE-2023-25727: XSS vulnerability in drag-and-drop upload of phpMyAdmin | 5.4 medium | 4.9.11 | 13 Feb 2023 |
| CVE-2020-10803: phpMyAdmin SQL injection vulnerability | 5.4 medium | 4.9.5 | 24 May 2022 |
| CVE-2022-23807: Improper Authentication in phpMyAdmin | 4.3 medium | 4.9.8 | 28 Jan 2022 |
Looking for another version, or everything Vulert holds for phpmyadmin/phpmyadmin?
Questions
About phpmyadmin/phpmyadmin 4.9.2
Is phpmyadmin/phpmyadmin 4.9.2 vulnerable?
Yes. 9 vulnerabilities in the Vulert database cover phpmyadmin/phpmyadmin 4.9.2: 1 critical, 4 high, 4 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor phpmyadmin/phpmyadmin for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the phpmyadmin/phpmyadmin version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.