Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpmyadmin phpmyadmin 4.4.15.9 vulnerabilities and exploits

(subscribe to this query)
8.6
CVSSv3
CVE-2016-6621
The setup script for phpMyAdmin prior to 4.0.10.19, 4.4.x prior to 4.4.15.10, and 4.6.x prior to 4.6.6 allows remote malicious users to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
Phpmyadmin PhpmyadminPhpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.15.9Phpmyadmin Phpmyadmin 4.4.0
6.1
CVSSv3
CVE-2017-1000013
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness
Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.4Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.4.1Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.8
6.1
CVSSv3
CVE-2017-1000015
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.10.8Phpmyadmin Phpmyadmin 4.0.10.10Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.17Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.10.3Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.10.5
7.5
CVSSv3
CVE-2017-1000014
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.6.5Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.10.1Phpmyadmin Phpmyadmin 4.0.10.2Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.16
5.3
CVSSv3
CVE-2016-9848
An issue exists in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including values of HttpOnly cookies. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.7
5.3
CVSSv3
CVE-2016-9851
An issue exists in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions (before 4.6.5), and 4.4.x versions (before 4.4.15.9) are affected.
Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.1.1Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.6
6.1
CVSSv3
CVE-2016-9857
An issue exists in phpMyAdmin. XSS is possible because of a weakness in a regular expression used in some JavaScript processing. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.13Phpmyadmin Phpmyadmin 4.0.10.5Phpmyadmin Phpmyadmin 4.0.10.4Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.6Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.0Phpmyadmin Phpmyadmin 4.0.10.12Phpmyadmin Phpmyadmin 4.0.10.11Phpmyadmin Phpmyadmin 4.0.10.3Phpmyadmin Phpmyadmin 4.0.10.2Phpmyadmin Phpmyadmin 4.0.5Phpmyadmin Phpmyadmin 4.0.4.2Phpmyadmin Phpmyadmin 4.0.10.16Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.2
7.5
CVSSv3
CVE-2016-9861
An issue exists in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.15.3Phpmyadmin Phpmyadmin 4.4.15.2Phpmyadmin Phpmyadmin 4.4.12Phpmyadmin Phpmyadmin 4.4.11Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.4Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.3Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.7
5.3
CVSSv3
CVE-2016-9859
An issue exists in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of service attack in import feature. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
Phpmyadmin Phpmyadmin 4.4.15.7Phpmyadmin Phpmyadmin 4.4.15.6Phpmyadmin Phpmyadmin 4.4.14.1Phpmyadmin Phpmyadmin 4.4.14Phpmyadmin Phpmyadmin 4.4.8Phpmyadmin Phpmyadmin 4.4.7Phpmyadmin Phpmyadmin 4.4.1Phpmyadmin Phpmyadmin 4.4.0Phpmyadmin Phpmyadmin 4.4.15.5Phpmyadmin Phpmyadmin 4.4.15.4Phpmyadmin Phpmyadmin 4.4.13.1Phpmyadmin Phpmyadmin 4.4.13Phpmyadmin Phpmyadmin 4.4.6.1Phpmyadmin Phpmyadmin 4.4.6Phpmyadmin Phpmyadmin 4.4.5Phpmyadmin Phpmyadmin 4.4.15.8Phpmyadmin Phpmyadmin 4.4.15.1Phpmyadmin Phpmyadmin 4.4.15Phpmyadmin Phpmyadmin 4.4.10Phpmyadmin Phpmyadmin 4.4.9Phpmyadmin Phpmyadmin 4.4.2Phpmyadmin Phpmyadmin 4.4.1.1
5.9
CVSSv3
CVE-2016-9860
An issue exists in phpMyAdmin. An unauthenticated user can execute a denial of service attack when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) ar...
Phpmyadmin Phpmyadmin 4.6.4Phpmyadmin Phpmyadmin 4.6.3Phpmyadmin Phpmyadmin 4.6.2Phpmyadmin Phpmyadmin 4.6.1Phpmyadmin Phpmyadmin 4.6.0Phpmyadmin Phpmyadmin 4.0.10.15Phpmyadmin Phpmyadmin 4.0.10.14Phpmyadmin Phpmyadmin 4.0.10.7Phpmyadmin Phpmyadmin 4.0.10.6Phpmyadmin Phpmyadmin 4.0.8Phpmyadmin Phpmyadmin 4.0.7Phpmyadmin Phpmyadmin 4.0.2Phpmyadmin Phpmyadmin 4.0.1Phpmyadmin Phpmyadmin 4.0.10.17Phpmyadmin Phpmyadmin 4.0.10.16Phpmyadmin Phpmyadmin 4.0.10.9Phpmyadmin Phpmyadmin 4.0.10.8Phpmyadmin Phpmyadmin 4.0.10Phpmyadmin Phpmyadmin 4.0.9Phpmyadmin Phpmyadmin 4.0.4Phpmyadmin Phpmyadmin 4.0.3Phpmyadmin Phpmyadmin 4.0.10.13
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook