Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 4.0.10.17 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2017-1000014
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.5Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.10.2Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.16
5.8
CVSSv2
CVE-2017-1000013
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness
Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.4Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.8
4.3
CVSSv2
CVE-2017-1000015
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.10.8Phpmyadmin Phpmyadmin 4.0.10.10Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.17Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.10.3Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.10.5
5
CVSSv2
CVE-2016-9847
An issue exists in phpMyAdmin. When the user does not specify a blowfish_secret key for encrypting cookies, phpMyAdmin generates one at runtime. A vulnerability was reported where the way this value is created uses a weak algorithm. This could allow an malicious user to determine...
Phpmyadmin Phpmyadmin 4.6.4Phpmyadmin Phpmyadmin 4.6.1Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.3Phpmyadmin Phpmyadmin 4.6.2Phpmyadmin Phpmyadmin 4.0.10.17Phpmyadmin Phpmyadmin 4.0.10.10Phpmyadmin Phpmyadmin 4.0.10.9Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.10.16Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.8Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.10.12Phpmyadmin Phpmyadmin 4.0.10.11
5
CVSSv2
CVE-2016-9848
An issue exists in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including values of HttpOnly cookies. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.7
7.5
CVSSv2
CVE-2016-9849
An issue exists in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']) and deny rules for username by using Null Byte in the username. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x vers...
Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.0.10.12Phpmyadmin Phpmyadmin 4.0.10.5Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.6Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.10.17Phpmyadmin Phpmyadmin 4.0.10.16Phpmyadmin Phpmyadmin 4.0.10.9Phpmyadmin Phpmyadmin 4.0.10.8Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.4
4.3
CVSSv2
CVE-2016-9856
An XSS issue exists in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10. This issue is resolved by using a copy of a hash to avoid a race condition. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) ...
Phpmyadmin Phpmyadmin 4.0.10.17Phpmyadmin Phpmyadmin 4.0.10.16Phpmyadmin Phpmyadmin 4.0.10.9Phpmyadmin Phpmyadmin 4.0.10.8Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.10Phpmyadmin Phpmyadmin 4.0.10.3Phpmyadmin Phpmyadmin 4.0.10.2Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.4.2
4.3
CVSSv2
CVE-2016-9857
An issue exists in phpMyAdmin. XSS is possible because of a weakness in a regular expression used in some JavaScript processing. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.0.10.5Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.6Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.10.12Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.3Phpmyadmin Phpmyadmin 4.0.10.2Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.4.2Phpmyadmin Phpmyadmin 4.0.10.16Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.2
5
CVSSv2
CVE-2016-9858
An issue exists in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in saved searches feature. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.1
5
CVSSv2
CVE-2016-9859
An issue exists in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in import feature. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.1.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook