Skip to content
OpenAdvisories
High DLA-406-1 2 CVEs

phpmyadmin - security update

Published Jan 30, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 phpmyadmin 4:3.3.7-11

Vulnerabilities 2

  • High 7.5
    CVE-2016-2041

    phpMyAdmin Unsafe comparison of XSRF/CSRF token

    libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier for remote attackers to bypass intended access restrictions by…

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Unscored —
    CVE-2016-2039

    libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not …

    phpmyadmin phpmyadmin Debian Ubuntu