Lucene search
GoogleOSV:CVE-2016-9866HistoryDec 11, 2016 - 3:00 a.m.
CVE-2016-9866
2016-12-1103:00:00
Google
osv.dev
6
An issue was discovered in phpMyAdmin. When the arg_separator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Related
alpinelinux
alpinelinux
CVE-2016-9866
2016-12-11 03:00:00
prion
prion
Cross site request forgery (csrf)
2016-12-11 03:00:00
Design/Logic Flaw
2017-05-07 08:29:00
cve
cve
CVE-2016-9866
2016-12-11 03:00:00
CVE-2016-1000373
2017-05-07 08:29:00
phpmyadmin
phpmyadmin
CSRF token not stripped from the URL
2016-11-25 00:00:00
cvelist
cvelist
CVE-2016-9866
2016-12-11 02:00:00
github
github
phpMyAdmin CSRF Vulnerability
2022-05-17 02:36:23
debiancve
debiancve
CVE-2016-9866
2016-12-11 03:00:00
osv
osv
phpMyAdmin CSRF Vulnerability
2022-05-17 02:36:23
phpmyadmin vulnerabilities
2021-03-16 14:27:57
ubuntucve
ubuntucve
CVE-2016-9866
2016-12-11 00:00:00
openvas
openvas
phpMyAdmin Multiple Security Vulnerabilities - 04 (Dec 2016) - Windows
2017-04-10 00:00:00
phpMyAdmin Multiple Security Vulnerabilities - 04 (Dec 2016) - Linux
2017-04-10 00:00:00
Mageia: Security Advisory (MGASA-2016-0416)
2022-01-28 00:00:00
mageia
mageia
Updated phpmyadmin packages fix security vulnerability
2016-12-09 11:42:46
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : phpMyAdmin vulnerabilities (USN-4843-1)
2023-10-16 00:00:00
phpMyAdmin 4.0.x < 4.0.10.18 / 4.4.x < 4.4.15.9 / 4.6.x < 4.6.5 Multiple Vulnerabilities
2020-12-07 00:00:00
GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities
2017-01-12 00:00:00
ubuntu
ubuntu
phpMyAdmin vulnerabilities
2021-03-16 00:00:00
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2017-01-11 00:00:00
Related for OSV:CVE-2016-9866