CVE-2018-10188

phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.

• CWE-352

• http://www.securityfocus.com/bid/103936Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040752Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44496/Exploit, Third Party Advisory, VDB Entry
• https://www.phpmyadmin.net/security/PMASA-2018-2/Vendor Advisory
• http://www.securityfocus.com/bid/103936Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040752Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44496/Exploit, Third Party Advisory, VDB Entry
• https://www.phpmyadmin.net/security/PMASA-2018-2/Vendor Advisory

Published

Apr 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1018A remote code execution vulnerability exists when Internet E…
• CVE-2018-10183An issue was discovered in BigTree 4.2.22. There is cross-si…
• CVE-2018-10184An issue was discovered in HAProxy before 1.8.8. The incomin…
• CVE-2018-10185An issue was discovered in TuziCMS v2.0.6. There is a CSRF v…
• CVE-2018-10186In radare2 2.5.0, there is a heap-based buffer over-read in …
• CVE-2018-10187In radare2 2.5.0, there is a heap-based buffer over-read in …
• CVE-2018-10189An issue was discovered in Mautic 1.x and 2.x before 2.13.0.…
• CVE-2018-1019A remote code execution vulnerability exists in the way that…
• CVE-2018-10190A vulnerability in London Trust Media Private Internet Acces…
• CVE-2018-10191In versions of mruby up to and including 1.4.0, an integer o…9.8
• CVE-2018-10192IPVanish 3.0.11 for macOS suffers from a root privilege esca…
• CVE-2018-10193LogMeIn LastPass through 4.15.0 allows remote attackers to c…