VULNERABILITY INTELLIGENCE

CVE-2019-25451

CVSS score5.3 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-02-20
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L

Description

phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests. Attackers can trick authenticated users into submitting GET requests to moadmin.php with parameters like action, db, and collection to create, drop, or repair databases and collections without user consent.

Weakness classification

  • CWE-918: Server-Side Request Forgery (SSRF)

Primary references