The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade phpmyadmin | Jul 30, 2024 | Jul 4, 2013 |
| Freebsd | — | Upgrade phpMyAdmin | Dec 10, 2025 | Jun 30, 2013 |
| Phpmyadmin | — | Upgrade phpMyAdmin to the latest version | May 4, 2017 | Jul 4, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub