We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2019-25453

CVE-2019-25453

PHP

Severity: MEDIUM
CVSS: 6.1CVSS
Published: 2026-02-20
Last modified: 2026-02-24
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE: CWE-79

Description

phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter. Attackers can craft URLs with JavaScript payloads in the newdb parameter of moadmin.php to execute arbitrary code in users' browsers when they visit the malicious link.

References

http://www.phpmoadmin.com/
https://www.exploit-db.com/exploits/46082
https://www.vulncheck.com/advisories/phpmoadmin-reflected-cross-site-scripting-via-moadminphp

Summary

Description

References