Medium severity6.1NVD Advisory· Published Feb 20, 2026· Updated Jun 17, 2026
CVE-2019-25453
CVE-2019-25453
Description
phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter. Attackers can craft URLs with JavaScript payloads in the newdb parameter of moadmin.php to execute arbitrary code in users' browsers when they visit the malicious link.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:phpmoadmin:phpmoadmin:1.1.5:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:phpmoadmin:phpmoadmin:1.1.5:*:*:*:*:*:*:*
- (no CPE)range: =1.1.5
- (no CPE)range: 1.1.5
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/46082nvdExploitVDB Entry
- www.vulncheck.com/advisories/phpmoadmin-reflected-cross-site-scripting-via-moadminphpnvdBroken LinkThird Party Advisory
- www.phpmoadmin.comnvdProduct
News mentions
0No linked articles in our index yet.