CVE-2019-25451

HIGH

phpMoAdmin 1.1.5 - Cross-Site Request Forgery via moadmin.php

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-25451. PoCs published by Ozer Goker.

AI-analyzed exploit summary The exploit demonstrates multiple CSRF and XSS vulnerabilities in phpMoAdmin 1.1.5. It includes functional HTML forms for CSRF attacks and payloads for reflected and stored XSS, targeting the 'db', 'newdb', and 'collection' parameters.

Description

phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests. Attackers can trick authenticated users into submitting GET requests to moadmin.php with parameters like action, db, and collection to create, drop, or repair databases and collections without user consent.

Exploits (1)

exploitdb WORKING POC
by Ozer Goker · textwebappsphp
https://www.exploit-db.com/exploits/46082

The exploit demonstrates multiple CSRF and XSS vulnerabilities in phpMoAdmin 1.1.5. It includes functional HTML forms for CSRF attacks and payloads for reflected and stored XSS, targeting the 'db', 'newdb', and 'collection' parameters.

Classification
Working Poc 95%
Attack Type
Xss | Csrf
Complexity
Trivial
Reliability
Reliable
Target: phpMoAdmin 1.1.5
No auth needed
Prerequisites: Access to the target application · Victim interaction for CSRF/XSS
devstral-2 · analyzed Feb 21, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Third Party Advisory exploit
https://www.exploit-db.com/exploits/46082
Various Sources product
http://www.phpmoadmin.com/

Scores

CVSS v3 8.8
EPSS 0.0032
EPSS Percentile 23.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (2)
phpmoadmin/phpmoadmin 1.1.5
Phpmoadmin/phpMoAdmin 1.1.5
Published Feb 20, 2026
Tracked Since Feb 21, 2026