An issue exists in phpMyAdmin. When the arg_separator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions (before 4.6.5), 4.4.x versions (before 4.4.15.9), and 4.0.x versions (before 4.0.10.18) are affected.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
phpmyadmin phpmyadmin 4.6.1 |
||
phpmyadmin phpmyadmin 4.6.0 |
||
phpmyadmin phpmyadmin 4.6.4 |
||
phpmyadmin phpmyadmin 4.6.3 |
||
phpmyadmin phpmyadmin 4.6.2 |
||
phpmyadmin phpmyadmin 4.4.15.8 |
||
phpmyadmin phpmyadmin 4.4.15.7 |
||
phpmyadmin phpmyadmin 4.4.15 |
||
phpmyadmin phpmyadmin 4.4.14.1 |
||
phpmyadmin phpmyadmin 4.4.9 |
||
phpmyadmin phpmyadmin 4.4.8 |
||
phpmyadmin phpmyadmin 4.4.1.1 |
||
phpmyadmin phpmyadmin 4.4.1 |
||
phpmyadmin phpmyadmin 4.4.15.2 |
||
phpmyadmin phpmyadmin 4.4.15.1 |
||
phpmyadmin phpmyadmin 4.4.11 |
||
phpmyadmin phpmyadmin 4.4.10 |
||
phpmyadmin phpmyadmin 4.4.3 |
||
phpmyadmin phpmyadmin 4.4.2 |
||
phpmyadmin phpmyadmin 4.4.15.6 |
||
phpmyadmin phpmyadmin 4.4.15.5 |
||
phpmyadmin phpmyadmin 4.4.14 |
||
phpmyadmin phpmyadmin 4.4.13.1 |
||
phpmyadmin phpmyadmin 4.4.7 |
||
phpmyadmin phpmyadmin 4.4.6.1 |
||
phpmyadmin phpmyadmin 4.4.0 |
||
phpmyadmin phpmyadmin 4.4.15.4 |
||
phpmyadmin phpmyadmin 4.4.15.3 |
||
phpmyadmin phpmyadmin 4.4.13 |
||
phpmyadmin phpmyadmin 4.4.12 |
||
phpmyadmin phpmyadmin 4.4.6 |
||
phpmyadmin phpmyadmin 4.4.5 |
||
phpmyadmin phpmyadmin 4.4.4 |
||
phpmyadmin phpmyadmin 4.0.10.13 |
||
phpmyadmin phpmyadmin 4.0.10.12 |
||
phpmyadmin phpmyadmin 4.0.10.5 |
||
phpmyadmin phpmyadmin 4.0.10.4 |
||
phpmyadmin phpmyadmin 4.0.6 |
||
phpmyadmin phpmyadmin 4.0.5 |
||
phpmyadmin phpmyadmin 4.0.0 |
||
phpmyadmin phpmyadmin 4.0.10.15 |
||
phpmyadmin phpmyadmin 4.0.10.14 |
||
phpmyadmin phpmyadmin 4.0.10.7 |
||
phpmyadmin phpmyadmin 4.0.10.6 |
||
phpmyadmin phpmyadmin 4.0.8 |
||
phpmyadmin phpmyadmin 4.0.7 |
||
phpmyadmin phpmyadmin 4.0.2 |
||
phpmyadmin phpmyadmin 4.0.1 |
||
phpmyadmin phpmyadmin 4.0.10.11 |
||
phpmyadmin phpmyadmin 4.0.10.10 |
||
phpmyadmin phpmyadmin 4.0.10.3 |
||
phpmyadmin phpmyadmin 4.0.10.2 |
||
phpmyadmin phpmyadmin 4.0.4.2 |
||
phpmyadmin phpmyadmin 4.0.4.1 |
||
phpmyadmin phpmyadmin 4.0.10.17 |
||
phpmyadmin phpmyadmin 4.0.10.16 |
||
phpmyadmin phpmyadmin 4.0.10.9 |
||
phpmyadmin phpmyadmin 4.0.10.8 |
||
phpmyadmin phpmyadmin 4.0.10.1 |
||
phpmyadmin phpmyadmin 4.0.10 |
||
phpmyadmin phpmyadmin 4.0.9 |
||
phpmyadmin phpmyadmin 4.0.4 |
||
phpmyadmin phpmyadmin 4.0.3 |
Vulmon