Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 4.0.10.15 vulnerabilities and exploits

(subscribe to this query)
4.4
CVSSv3
CVE-2016-4412
An issue exists in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the user's valid phpMyAdmin token. All 4.0.x versions (before 4.0.10.16) are affected.
Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.10.5Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.6Phpmyadmin Phpmyadmin 4.0.10.3Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.12Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.8
8.1
CVSSv3
CVE-2016-6606
An issue exists in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a padding oracle attack. This can allow an attacker who has access to a user's browser cookie file to decrypt the username and password. Furthermore, the same initial...
Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5
8.8
CVSSv3
CVE-2016-6609
An issue exists in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (before 4.6.4), 4.4.x versions (before 4.4.15.8), and 4.0.x versions (before 4.0.10.17) are affected.
Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.15
5.3
CVSSv3
CVE-2016-6613
An issue exists in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which phpMyAdmin will then expose to the user. All 4.6.x versions (before 4.6.4), 4.4.x versions (before 4.4.15.8), and 4.0.x versions...
Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15
6.8
CVSSv3
CVE-2016-6614
An issue exists in phpMyAdmin involving the %u username replacement functionality of the SaveDir and UploadDir features. When the username substitution is configured, a specially-crafted user name can be used to circumvent restrictions to traverse the file system. All 4.6.x versi...
Phpmyadmin Phpmyadmin 4.6.2Phpmyadmin Phpmyadmin 4.6.1Phpmyadmin Phpmyadmin 4.6.3Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.10Phpmyadmin Phpmyadmin 4.0.10.3Phpmyadmin Phpmyadmin 4.0.10.2Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.4.2Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.0.10.12Phpmyadmin Phpmyadmin 4.0.10.5
6.5
CVSSv3
CVE-2016-6618
An issue exists in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service (DoS) attack against the server. All 4.6.x versions (before 4.6.4), 4.4.x versions (before 4.4.15.8), and 4.0.x versions (before 4.0.10.17) are affected.
Phpmyadmin Phpmyadmin 4.6.1Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.3Phpmyadmin Phpmyadmin 4.6.2Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.8
8.8
CVSSv3
CVE-2016-6619
An issue exists in phpMyAdmin. In the user interface preference feature, a user can execute an SQL injection attack against the account of the control user. All 4.6.x versions (before 4.6.4), 4.4.x versions (before 4.4.15.8), and 4.0.x versions (before 4.0.10.17) are affected.
Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.15.2
9.8
CVSSv3
CVE-2016-6620
An issue exists in phpMyAdmin. Some data is passed to the PHP unserialize() function without verification that it's valid serialized data. The unserialization can result in code execution because of the interaction with object instantiation and autoloading. All 4.6.x version...
Phpmyadmin Phpmyadmin 4.6.1Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.3Phpmyadmin Phpmyadmin 4.6.2Phpmyadmin Phpmyadmin 4.0.10.10Phpmyadmin Phpmyadmin 4.0.10.9Phpmyadmin Phpmyadmin 4.0.10.2Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.4.2Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.10.5Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.10.16Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.8Phpmyadmin Phpmyadmin 4.0.10.7
5.9
CVSSv3
CVE-2016-6622
An issue exists in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true. All 4.6.x versions (before 4.6.4), 4.4.x versions (before 4.4....
Phpmyadmin Phpmyadmin 4.0.10.16Phpmyadmin Phpmyadmin 4.0.10.9Phpmyadmin Phpmyadmin 4.0.10.8Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.0.10.12Phpmyadmin Phpmyadmin 4.0.10.5Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.6Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1
6.5
CVSSv3
CVE-2016-6623
An issue exists in phpMyAdmin. An authorized user can cause a denial-of-service (DoS) attack on a server by passing large values to a loop. All 4.6.x versions (before 4.6.4), 4.4.x versions (before 4.4.15.8), and 4.0.x versions (before 4.0.10.17) are affected.
Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook