phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention

🗓️ 17 May 2022 02:37:25Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 105 Views

phpMyAdmin IPv6 and proxy server IP-based authentication rule vulnerabilit

Reporter	Title	Published	Views	Family All 41
Tenable Nessus	phpMyAdmin 4.0.10.x < 4.0.10.17 / 4.4.15.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities	30 Aug 201600:00	–	nessus
Tenable Nessus	Debian DLA-1821-1 : phpmyadmin security update	18 Jun 201900:00	–	nessus
Tenable Nessus	Debian DLA-626-1 : phpmyadmin security update	19 Sep 201600:00	–	nessus
Tenable Nessus	FreeBSD : phpmyadmin -- multiple vulnerabilities (ef70b201-645d-11e6-9cdc-6805ca0b3d42)	18 Aug 201600:00	–	nessus
Tenable Nessus	GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities	12 Jan 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-1021)	30 Aug 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-1027)	30 Aug 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.17 / 4.4.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities (PMASA-2016-29 - PMASA-2016-56) (deprecated)	21 Nov 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.0 < 4.0.10.17 / 4.4.0 < 4.4.15.8 / 4.6.0 < 4.6.4 Multiple Vulnerabilities	30 Nov 202000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-6624	25 Aug 202500:00	–	nessus

Vulners

Node

phpmyadmin phpmyadminRange4.0–4.0.10.17composer

phpmyadmin phpmyadminRange4.4–4.4.15.8composer

phpmyadmin phpmyadminRange4.6–4.6.4composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-6624
lists	www.lists.debian.org/debian-lts-announce/2019/06/msg00009.html
security	www.security.gentoo.org/glsa/201701-32
phpmyadmin	www.phpmyadmin.net/security/PMASA-2016-47
securityfocus	www.securityfocus.com/bid/92489
github	www.github.com/advisories/GHSA-mhxj-6vf8-mwv3

24 Apr 2024 18:10Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

CVSS 35.9

EPSS0.00421