CVE-2016-9849

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction $cfg'Servers'$i'AllowRoot' and deny rules for username by using Null Byte in the username. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

Design/Logic Flaw

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction $cfg'Servers'$i'AllowRoot' and deny rules for username by using Null Byte in the username. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

CVE-2016-9849

CVE-2016-9849 affects phpMyAdmin; the vulnerability lets an attacker bypass the AllowRoot restriction and deny rules for usernames by injecting a null byte into the username. Affected are all 4.6.x versions prior to 4.6.5, 4.4.x prior to 4.4.15.9, and 4.0.x prior to 4.0.10.18. Exploitation could ...

CVE-2016-9849

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction $cfg'Servers'$i'AllowRoot' and deny rules for username by using Null Byte in the username. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

PT-2016-7842

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.0 through 4.0.10.17 phpMyAdmin versions 4.4.0 through 4.4.15.8 phpMyAdmin versions 4.6.0 through 4.6.4 Description An issue was discovered that allows bypassing the AllowRoot restriction and deny rules for usernames by...