Lucene search
GoogleOSV:CVE-2016-9849HistoryDec 11, 2016 - 2:59 a.m.
CVE-2016-9849
2016-12-1102:59:00
Google
osv.dev
14
EPSS
0.005
Percentile
76.0%
An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg[‘Servers’][$i][‘AllowRoot’]) and deny rules for username by using Null Byte in the username. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Related
alpinelinux
alpinelinux
CVE-2016-9849
2016-12-11 02:59:47
phpmyadmin
phpmyadmin
Username deny rules bypass (AllowRoot & Others) by using Null Byte
2016-11-25 00:00:00
debiancve
debiancve
CVE-2016-9849
2016-12-11 02:59:47
prion
prion
Design/Logic Flaw
2016-12-11 02:59:00
Design/Logic Flaw
2017-05-07 08:29:00
nvd
nvd
CVE-2016-9849
2016-12-11 02:59:47
CVE-2016-1000362
2017-05-07 08:29:00
cve
cve
CVE-2016-9849
2016-12-11 02:59:47
CVE-2016-1000362
2017-05-07 08:29:00
ubuntucve
ubuntucve
CVE-2016-9849
2016-12-11 00:00:00
cvelist
cvelist
CVE-2016-9849
2016-12-11 02:00:00
osv
osv
phpmyadmin - security update
2016-12-24 00:00:00
phpmyadmin - security update
2019-06-16 00:00:00
phpmyadmin vulnerabilities
2021-03-16 14:27:57
openvas
openvas
Debian: Security Advisory (DLA-757-1)
2023-03-08 00:00:00
phpMyAdmin Multiple Security Vulnerabilities - 04 (Dec 2016) - Linux
2017-04-10 00:00:00
phpMyAdmin Multiple Security Vulnerabilities - 04 (Dec 2016) - Windows
2017-04-10 00:00:00
debian
debian
[SECURITY] [DLA 757-1] phpmyadmin security update
2016-12-24 22:29:29
[SECURITY] [DLA 1821-1] phpmyadmin security update
2019-06-17 20:41:59
nessus
nessus
Debian DLA-757-1 : phpmyadmin security update
2016-12-27 00:00:00
Debian DLA-1821-1 : phpmyadmin security update
2019-06-18 00:00:00
mageia
mageia
Updated phpmyadmin packages fix security vulnerability
2016-12-09 11:42:46
ubuntu
ubuntu
phpMyAdmin vulnerabilities
2021-03-16 00:00:00
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2017-01-11 00:00:00