7.5

CVE-2016-9861

An issue was discovered in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyadmin ≫ Phpmyadmin Version 4.4.0
Phpmyadmin ≫ Phpmyadmin Version 4.4.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.1.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.2
Phpmyadmin ≫ Phpmyadmin Version 4.4.3
Phpmyadmin ≫ Phpmyadmin Version 4.4.4
Phpmyadmin ≫ Phpmyadmin Version 4.4.5
Phpmyadmin ≫ Phpmyadmin Version 4.4.6
Phpmyadmin ≫ Phpmyadmin Version 4.4.6.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.7
Phpmyadmin ≫ Phpmyadmin Version 4.4.8
Phpmyadmin ≫ Phpmyadmin Version 4.4.9
Phpmyadmin ≫ Phpmyadmin Version 4.4.10
Phpmyadmin ≫ Phpmyadmin Version 4.4.11
Phpmyadmin ≫ Phpmyadmin Version 4.4.12
Phpmyadmin ≫ Phpmyadmin Version 4.4.13
Phpmyadmin ≫ Phpmyadmin Version 4.4.13.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.14
Phpmyadmin ≫ Phpmyadmin Version 4.4.14.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.15
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.1
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.2
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.3
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.4
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.5
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.6
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.7
Phpmyadmin ≫ Phpmyadmin Version 4.4.15.8
Phpmyadmin ≫ Phpmyadmin Version 4.6.0
Phpmyadmin ≫ Phpmyadmin Version 4.6.1
Phpmyadmin ≫ Phpmyadmin Version 4.6.2
Phpmyadmin ≫ Phpmyadmin Version 4.6.3
Phpmyadmin ≫ Phpmyadmin Version 4.6.4
Phpmyadmin ≫ Phpmyadmin Version 4.0.0
Phpmyadmin ≫ Phpmyadmin Version 4.0.1
Phpmyadmin ≫ Phpmyadmin Version 4.0.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.3
Phpmyadmin ≫ Phpmyadmin Version 4.0.4
Phpmyadmin ≫ Phpmyadmin Version 4.0.4.1
Phpmyadmin ≫ Phpmyadmin Version 4.0.4.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.5
Phpmyadmin ≫ Phpmyadmin Version 4.0.6
Phpmyadmin ≫ Phpmyadmin Version 4.0.7
Phpmyadmin ≫ Phpmyadmin Version 4.0.8
Phpmyadmin ≫ Phpmyadmin Version 4.0.9
Phpmyadmin ≫ Phpmyadmin Version 4.0.10
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.1
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.2
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.3
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.4
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.5
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.6
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.7
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.8
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.9
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.10
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.11
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.12
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.13
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.14
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.15
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.16
Phpmyadmin ≫ Phpmyadmin Version 4.0.10.17
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.79% 0.755
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://security.gentoo.org/glsa/201701-32
https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
http://www.securityfocus.com/bid/94535
https://www.phpmyadmin.net/security/PMASA-2016-66
Patch
Vendor Advisory