Unrated severityNVD Advisory· Published Feb 20, 2026· Updated Apr 7, 2026
phpMoAdmin 1.1.5 Reflected Cross-Site Scripting via moadmin.php
CVE-2019-25453
Description
phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter. Attackers can craft URLs with JavaScript payloads in the newdb parameter of moadmin.php to execute arbitrary code in users' browsers when they visit the malicious link.
Affected products
2- Range: =1.1.5
- Phpmoadmin/phpMoAdminv5Range: 1.1.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/46082mitreexploit
- www.vulncheck.com/advisories/phpmoadmin-reflected-cross-site-scripting-via-moadminphpmitrethird-party-advisory
- www.phpmoadmin.commitreproduct
News mentions
0No linked articles in our index yet.