Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 4.4.15.7 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2016-6615
XSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding feature (a specially-crafted database name can be used to trigger an XSS attack); the "Tracking" feature (a specially-crafted query can be used to trigger an XSS attack); an...
Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.14.1
7.5
CVSSv3
CVE-2016-6616
An issue exists in phpMyAdmin. In the "User group" and "Designer" features, a user can execute an SQL injection attack against the account of the control user. All 4.6.x versions (before 4.6.4) and 4.4.x versions (before 4.4.15.8) are affected.
Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.12
5.3
CVSSv3
CVE-2016-9852
An issue exists in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in...
Phpmyadmin Phpmyadmin 4.6.4Phpmyadmin Phpmyadmin 4.6.3Phpmyadmin Phpmyadmin 4.6.2Phpmyadmin Phpmyadmin 4.6.1Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4
5.3
CVSSv3
CVE-2016-9853
An issue exists in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in...
Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.14.1
5.3
CVSSv3
CVE-2016-9854
An issue exists in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in...
Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.8
5.3
CVSSv3
CVE-2016-9855
An issue exists in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in...
Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.1.1
5.3
CVSSv3
CVE-2016-9851
An issue exists in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions (before 4.6.5), and 4.4.x versions (before 4.4.15.9) are affected.
Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.6
8.1
CVSSv3
CVE-2016-6606
An issue exists in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a padding oracle attack. This can allow an attacker who has access to a user's browser cookie file to decrypt the username and password. Furthermore, the same initial...
Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5
8.8
CVSSv3
CVE-2016-6609
An issue exists in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (before 4.6.4), 4.4.x versions (before 4.4.15.8), and 4.0.x versions (before 4.0.10.17) are affected.
Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.15
5.3
CVSSv3
CVE-2016-6613
An issue exists in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which phpMyAdmin will then expose to the user. All 4.6.x versions (before 4.6.4), 4.4.x versions (before 4.4.15.8), and 4.0.x versions...
Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook