phpMyAdmin allows to detect if user is logged in

🗓️ 17 May 2022 02:37:15Reported by GitHub Advisory DatabaseType

phpMyAdmin user login detection vulnerabilit

Reporter	Title	Published	Views	Family All 33
Tenable Nessus	phpMyAdmin 4.0.10.x < 4.0.10.17 / 4.4.15.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities	30 Aug 201600:00	–	nessus
Tenable Nessus	FreeBSD : phpmyadmin -- multiple vulnerabilities (ef70b201-645d-11e6-9cdc-6805ca0b3d42)	18 Aug 201600:00	–	nessus
Tenable Nessus	GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities	12 Jan 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-1021)	30 Aug 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-1027)	30 Aug 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.17 / 4.4.x < 4.4.15.8 / 4.6.x < 4.6.4 Multiple Vulnerabilities (PMASA-2016-29 - PMASA-2016-56) (deprecated)	21 Nov 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.0 < 4.0.10.17 / 4.4.0 < 4.4.15.8 / 4.6.0 < 4.6.4 Multiple Vulnerabilities	30 Nov 202000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-6625	25 Aug 202500:00	–	nessus
AlpineLinux	CVE-2016-6625	11 Dec 201602:00	–	alpinelinux
CNVD	phpMyAdmin security bypass vulnerability (CNVD-2016-07930)	21 Sep 201600:00	–	cnvd

Vulners

Node

phpmyadmin phpmyadminRange4.0–4.0.10.17composer

phpmyadmin phpmyadminRange4.4–4.4.15.8composer

phpmyadmin phpmyadminRange4.6–4.6.4composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-6625
security	www.security.gentoo.org/glsa/201701-32
phpmyadmin	www.phpmyadmin.net/security/PMASA-2016-48
securityfocus	www.securityfocus.com/bid/92491
github	www.github.com/advisories/GHSA-r643-7xfg-ppc5

24 Apr 2024 18:11Current

7.1High risk

Vulners AI Score7.1

CVSS 24

CVSS 34.3

EPSS0.00275