Medium
phpmyadmin — security advisory
An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.
- Products
- phpmyadmin
- Affected versions
- 4:5.0.4+dfsg2-2ubuntu5, 4:5.1.1+dfsg1-5ubuntu1, 4:5.2.1+dfsg-1ubuntu1, 4:5.2.1+dfsg-2ubuntu1, 4:5.2.1+dfsg-2ubuntu2, 4:5.2.1+dfsg-3, 4:5.2.2-really+dfsg-1, 4:5.2.2-really+dfsg-2, 4:5.2.2-really5.2.2+20250121+dfsg-1, 4:5.2.3+dfsg-1, 4:5.2.4~dev~git20260809.e0909b211b+dfsg-1
- Fixed versions
- Not specified
- CVEs
- CVE-2022-23808
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:45 UTC · Revision 1
Source evidence
An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.
osv:UBUNTU-CVE-2022-23808
phpmyadmin
Fixed versions: Not specified
phpmyadmin
Fixed versions: Not specified
phpmyadmin
Fixed versions: Not specified
phpmyadmin
Fixed versions: Not specified
phpmyadmin
Fixed versions: Not specified
Complete source record
{
"id": "035f88849b504da5fdf4a1be4f4d4a8dd4db19b8e3841bece911052f7b432661",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-23808",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2022-23808",
"summary": "An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.",
"evidence": "osv:UBUNTU-CVE-2022-23808",
"products": [
{
"name": {
"value": "phpmyadmin",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4:5.0.4+dfsg2-2ubuntu5",
"evidence": "/affected/0/versions"
},
{
"value": "4:5.1.1+dfsg1-5ubuntu1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "phpmyadmin",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4:5.2.1+dfsg-1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "4:5.2.1+dfsg-2ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "4:5.2.1+dfsg-2ubuntu2",
"evidence": "/affected/1/versions"
},
{
"value": "4:5.2.1+dfsg-3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "phpmyadmin",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4:5.2.2-really5.2.2+20250121+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "4:5.2.2-really+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "4:5.2.2-really+dfsg-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "phpmyadmin",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4:5.2.3+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "4:5.2.4~dev~git20260809.e0909b211b+dfsg-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "phpmyadmin",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4:5.2.2-really+dfsg-2",
"evidence": "/affected/4/versions"
},
{
"value": "4:5.2.3+dfsg-1",
"evidence": "/affected/4/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2022-23808",
"aliases": [
"UBUNTU-CVE-2022-23808"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "phpmyadmin",
"purl": "pkg:deb/ubuntu/phpmyadmin?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"4:5.0.4+dfsg2-2ubuntu5",
"4:5.1.1+dfsg1-5ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-23808.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "phpmyadmin",
"binary_version": "4:5.1.1+dfsg1-5ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "phpmyadmin",
"purl": "pkg:deb/ubuntu/phpmyadmin?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"4:5.2.1+dfsg-1ubuntu1",
"4:5.2.1+dfsg-2ubuntu1",
"4:5.2.1+dfsg-2ubuntu2",
"4:5.2.1+dfsg-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-23808.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "phpmyadmin",
"binary_version": "4:5.2.1+dfsg-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "phpmyadmin",
"purl": "pkg:deb/ubuntu/phpmyadmin?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"4:5.2.2-really5.2.2+20250121+dfsg-1",
"4:5.2.2-really+dfsg-1",
"4:5.2.2-really+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-23808.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "phpmyadmin",
"binary_version": "4:5.2.2-really+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "phpmyadmin",
"purl": "pkg:deb/ubuntu/phpmyadmin?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"4:5.2.3+dfsg-1",
"4:5.2.4~dev~git20260809.e0909b211b+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-23808.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "phpmyadmin",
"binary_version": "4:5.2.4~dev~git20260809.e0909b211b+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "phpmyadmin",
"purl": "pkg:deb/ubuntu/phpmyadmin?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"4:5.2.2-really+dfsg-2",
"4:5.2.3+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-23808.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "phpmyadmin",
"binary_version": "4:5.2.3+dfsg-1"
}
]
}
}
],
"modified": "2026-10-17T12:56:02.192598897Z",
"provider": "osv",
"upstream": [
"CVE-2022-23808"
],
"references": [
"https://ubuntu.com/security/CVE-2022-23808",
"https://www.phpmyadmin.net/security/PMASA-2022-2/",
"https://github.com/phpmyadmin/phpmyadmin/commit/5118acce1dfcdb09cbc0f73927bf51c46feeaf38",
"https://github.com/phpmyadmin/phpmyadmin/commit/44eb12f15a562718bbe54c9a16af91ceea335d59",
"https://www.cve.org/CVERecord?id=CVE-2022-23808"
]
},
"related_cves": [
{
"value": "CVE-2022-23808",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 354629,
"published_at": "2022-01-22T02:15:00+00:00"
}