CVE-2018-19969

phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws. By deceiving a user into clicking on a crafted URL, it is possible to perform harmful SQL operations such as renaming databases, creating new tables/routines, deleting designer pages, adding/deleting users, updating user passwords, killing SQL processes, etc.

• CWE-352

• http://www.securityfocus.com/bid/106175Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201904-16Third Party Advisory
• https://www.phpmyadmin.net/security/PMASA-2018-7/Patch, Vendor Advisory
• http://www.securityfocus.com/bid/106175Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201904-16Third Party Advisory
• https://www.phpmyadmin.net/security/PMASA-2018-7/Patch, Vendor Advisory

Published

Dec 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19963An issue was discovered in Xen 4.11 allowing HVM guest OS us…
• CVE-2018-19964An issue was discovered in Xen 4.11.x allowing x86 guest OS …
• CVE-2018-19965An issue was discovered in Xen through 4.11.x allowing 64-bi…
• CVE-2018-19966An issue was discovered in Xen through 4.11.x allowing x86 P…
• CVE-2018-19967An issue was discovered in Xen through 4.11.x on Intel x86 p…
• CVE-2018-19968An attacker can exploit phpMyAdmin before 4.8.4 to leak the …
• CVE-2018-1997IBM Business Automation Workflow and Business Process Manage…4.3
• CVE-2018-19970In phpMyAdmin before 4.8.4, an XSS vulnerability was found i…
• CVE-2018-19971JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
• CVE-2018-19974In YARA 3.8.1, bytecode in a specially crafted compiled rule…
• CVE-2018-19975In YARA 3.8.1, bytecode in a specially crafted compiled rule…
• CVE-2018-19976In YARA 3.8.1, bytecode in a specially crafted compiled rule…