CVE-2019-11768: phpMyAdmin

Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days.

An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature.

Affected products

• phpMyAdmin phpMyAdmin: before 4.9.0.1 (fixed in 4.9.0.1)

Published 2019-06-05. Last modified 2026-06-17.