https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-25454.htmlhttps://patchthecve.com/cve/CVE-2019-25454.htmlWed, 17 Jun 2026 02:32:24 +0000MEDIUM 6.1: phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection creationhttps://patchthecve.com/cve/CVE-2019-25453.htmlhttps://patchthecve.com/cve/CVE-2019-25453.htmlWed, 17 Jun 2026 02:32:24 +0000MEDIUM 6.1: phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter. Attackers can craft URLs with JavaScript payloads in the newdb parameter of moadmin.php to execute arbitrary code in users' https://patchthecve.com/cve/CVE-2019-25451.htmlhttps://patchthecve.com/cve/CVE-2019-25451.htmlWed, 17 Jun 2026 02:32:24 +0000HIGH 8.8: phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests. Attackers can trick authenticated users into submitting GET requests to moadmin.php with parameters like action, db, and collection t