p PatchFirst

CVE-2022-23808

CVE-2022-23808

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.

CVSS 6.1 · Medium · EPSS 7.9% · Public exploit · Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • phpmyadmin Debian:12

    Affected ranges
    • ECOSYSTEM: < 4:5.1.3+dfsg1-1

    Update to 4:5.1.3+dfsg1-1

  • phpmyadmin Debian:13

    Affected ranges
    • ECOSYSTEM: < 4:5.1.3+dfsg1-1

    Update to 4:5.1.3+dfsg1-1

  • phpmyadmin Debian:14

    Affected ranges
    • ECOSYSTEM: < 4:5.1.3+dfsg1-1

    Update to 4:5.1.3+dfsg1-1

  • phpmyadmin/phpmyadmin Packagist

    Versions
    • 5.1.0
    • 5.1.1
    Affected ranges
    • ECOSYSTEM: ≥ 5.1.0, < 5.1.2

    Update to 5.1.2

  • phpmyadmin Ubuntu:22.04:LTS

    Versions
    • 4:5.0.4+dfsg2-2ubuntu5
    • 4:5.1.1+dfsg1-5ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpmyadmin Ubuntu:24.04:LTS

    Versions
    • 4:5.2.1+dfsg-1ubuntu1
    • 4:5.2.1+dfsg-2ubuntu1
    • 4:5.2.1+dfsg-2ubuntu2
    • 4:5.2.1+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpmyadmin Ubuntu:25.10

    Versions
    • 4:5.2.2-really5.2.2+20250121+dfsg-1
    • 4:5.2.2-really+dfsg-1
    • 4:5.2.2-really+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpmyadmin Ubuntu:26.10

    Versions
    • 4:5.2.3+dfsg-1
    • 4:5.2.4~dev~git20260809.e0909b211b+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • phpmyadmin Ubuntu:26.04:LTS

    Versions
    • 4:5.2.2-really+dfsg-2
    • 4:5.2.3+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →