Lucene search
GoogleOSV:CVE-2016-9866HistoryDec 11, 2016 - 3:00 a.m.
CVE-2016-9866
2016-12-1103:00:00
Google
osv.dev
10
EPSS
0.002
Percentile
54.2%
An issue was discovered in phpMyAdmin. When the arg_separator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Related
osv
osv
phpMyAdmin CSRF Vulnerability
2022-05-17 02:36:23
phpmyadmin vulnerabilities
2021-03-16 14:27:57
phpMyAdmin-4.6.5.2-1.1 on GA media
2024-06-15 00:00:00
ubuntucve
ubuntucve
CVE-2016-9866
2016-12-11 00:00:00
phpmyadmin
phpmyadmin
CSRF token not stripped from the URL
2016-11-25 00:00:00
cvelist
cvelist
CVE-2016-9866
2016-12-11 02:00:00
cve
cve
CVE-2016-9866
2016-12-11 03:00:08
CVE-2016-1000373
2017-05-07 08:29:00
prion
prion
Cross site request forgery (csrf)
2016-12-11 03:00:00
Design/Logic Flaw
2017-05-07 08:29:00
alpinelinux
alpinelinux
CVE-2016-9866
2016-12-11 03:00:08
nvd
nvd
CVE-2016-9866
2016-12-11 03:00:08
CVE-2016-1000373
2017-05-07 08:29:00
debiancve
debiancve
CVE-2016-9866
2016-12-11 03:00:08
github
github
phpMyAdmin CSRF Vulnerability
2022-05-17 02:36:23
openvas
openvas
phpMyAdmin Multiple Security Vulnerabilities - 04 (Dec 2016) - Linux
2017-04-10 00:00:00
phpMyAdmin Multiple Security Vulnerabilities - 04 (Dec 2016) - Windows
2017-04-10 00:00:00
Mageia: Security Advisory (MGASA-2016-0416)
2022-01-28 00:00:00
nessus
nessus
phpMyAdmin 4.0.x < 4.0.10.18 / 4.4.x < 4.4.15.9 / 4.6.x < 4.6.5 Multiple Vulnerabilities
2020-12-07 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : phpMyAdmin vulnerabilities (USN-4843-1)
2023-10-16 00:00:00
GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities
2017-01-12 00:00:00
mageia
mageia
Updated phpmyadmin packages fix security vulnerability
2016-12-09 11:42:46
ubuntu
ubuntu
phpMyAdmin vulnerabilities
2021-03-16 00:00:00
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2017-01-11 00:00:00