CVE-2018-19968

An attacker can exploit phpMyAdmin before 4.8.4 to leak the contents of a local file because of an error in the transformation feature. The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has access. An attacker must have valid credentials to log in to phpMyAdmin; this vulnerability does not allow an attacker to circumvent the login system.

• CWE-200

• http://www.securityfocus.com/bid/106178Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/02/msg00003.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201904-16Third Party Advisory
• https://www.phpmyadmin.net/security/PMASA-2018-6/Patch, Vendor Advisory
• http://www.securityfocus.com/bid/106178Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/02/msg00003.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201904-16Third Party Advisory
• https://www.phpmyadmin.net/security/PMASA-2018-6/Patch, Vendor Advisory

Published

Dec 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19962An issue was discovered in Xen through 4.11.x on AMD x86 pla…
• CVE-2018-19963An issue was discovered in Xen 4.11 allowing HVM guest OS us…
• CVE-2018-19964An issue was discovered in Xen 4.11.x allowing x86 guest OS …
• CVE-2018-19965An issue was discovered in Xen through 4.11.x allowing 64-bi…
• CVE-2018-19966An issue was discovered in Xen through 4.11.x allowing x86 P…
• CVE-2018-19967An issue was discovered in Xen through 4.11.x on Intel x86 p…
• CVE-2018-19969phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affec…
• CVE-2018-1997IBM Business Automation Workflow and Business Process Manage…4.3
• CVE-2018-19970In phpMyAdmin before 4.8.4, an XSS vulnerability was found i…
• CVE-2018-19971JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
• CVE-2018-19974In YARA 3.8.1, bytecode in a specially crafted compiled rule…
• CVE-2018-19975In YARA 3.8.1, bytecode in a specially crafted compiled rule…