CVE-2019-12922

A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

• CWE-352

• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00078.htmlBroken Link
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/154483/phpMyAdmin-4.9.0.1-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Sep/23Exploit, Mailing List, Third Party Advisory
• https://github.com/phpmyadmin/phpmyadmin/commit/427fbed55d3154d96ecfc1c7784d49eaa3c04161Patch, Third Party Advisory
• https://github.com/phpmyadmin/phpmyadmin/commit/7d21d4223bdbe0306593309132b4263d7087d13bPatch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBLBE6CSC2ZLINIRBUU5XBLXYVBTF3KA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QJ5BW2VEMD2P23ZYRWHDBEQHOKGKGWD6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YCB3PTGHZ7AJCM6BKCQRRP6HG3OKYCMN/
• https://www.exploit-db.com/exploits/47385Exploit, Third Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00078.htmlBroken Link
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/154483/phpMyAdmin-4.9.0.1-Cross-Site-Request-Forgery.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Sep/23Exploit, Mailing List, Third Party Advisory
• https://github.com/phpmyadmin/phpmyadmin/commit/427fbed55d3154d96ecfc1c7784d49eaa3c04161Patch, Third Party Advisory
• https://github.com/phpmyadmin/phpmyadmin/commit/7d21d4223bdbe0306593309132b4263d7087d13bPatch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBLBE6CSC2ZLINIRBUU5XBLXYVBTF3KA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QJ5BW2VEMD2P23ZYRWHDBEQHOKGKGWD6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YCB3PTGHZ7AJCM6BKCQRRP6HG3OKYCMN/
• https://www.exploit-db.com/exploits/47385Exploit, Third Party Advisory, VDB Entry

Published

Sep 13, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12917A reflected XSS vulnerability exists in Quest KACE Systems M…6.1
• CVE-2019-12918Quest KACE Systems Management Appliance Server Center versio…9.8
• CVE-2019-12919On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-…
• CVE-2019-1292A denial of service vulnerability exists when Windows improp…4.9
• CVE-2019-12920On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-…
• CVE-2019-12921In GraphicsMagick before 1.3.32, the text filename component…6.5
• CVE-2019-12923In MailEnable Enterprise Premium 10.23, the potential cross-…
• CVE-2019-12924MailEnable Enterprise Premium 10.23 was vulnerable to XML Ex…
• CVE-2019-12925MailEnable Enterprise Premium 10.23 was vulnerable to multip…
• CVE-2019-12926MailEnable Enterprise Premium 10.23 did not use appropriate …
• CVE-2019-12927MailEnable Enterprise Premium 10.23 was vulnerable to stored…
• CVE-2019-12928The QMP migrate command in QEMU version 4.0.0 and earlier is…