Archive
11 December 2016
Vulnerabilities first published on this day (UTC), newest first.
48 results · Feed
-
Unscored —
An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of se…
-
Unscored —
An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is …
-
Unscored —
An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']…
-
Unscored —
An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statement…
-
High 7.5
phpMyAdmin Bypass white-list protection for URL redirection
An issue was discovered in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affecte…
-
Medium 5.9
phpMyAdmin Denial of Service (DoS)
An issue was discovered in phpMyAdmin. An unauthenticated user can execute a denial of service attack when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x version…
-
Unscored —
An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to initiate a denial of se…
-
Unscored —
An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is …