CVE-2015-3637: Phpmybackuppro

High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL commands via the username and password parameters.

Affected products

• Phpmybackuppro Phpmybackuppro: before 2.5 (fixed in 2.5)

Published 2017-12-28. Last modified 2026-06-17.