CVE-2022-0813: phpMyAdmin

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

PhpMyAdmin 5.1.1 and before allows an attacker to retrieve potentially sensitive information by creating invalid requests. This affects the lang parameter, the pma_parameter, and the cookie section.

Affected products

• phpMyAdmin phpMyAdmin: up to and including 5.1.1

Published 2022-03-10. Last modified 2026-06-17.