CVE-2019-12616

CVE-2019-12616 describes a Cross-Site Request Forgery (CSRF) vulnerability in phpMyAdmin versions prior to 4.9.0. An attacker can leverage this flaw to trick an authenticated phpMyAdmin user into executing arbitrary database operations, such as INSERT or DELETE statements, by embedding malicious requests within seemingly innocuous content like a broken image tag. The vulnerability has a CVSS score of 6.5 (Medium) due to its network-based attack vector, low attack complexity, and high impact on data integrity, although it requires user interaction. While there is no evidence of active exploitation in the wild, an exploit proof-of-concept (EDB-46982) exists, and the vulnerability has a high FAUCET Risk Score of 98/100, despite minimal community discussion or media coverage.