Description

An issue was discovered in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

Remediation

References

CVE-2016-9861

Related Vulnerabilities

Apache Tomcat URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-11784)

PostgreSQL Improper Access Control Vulnerability (CVE-2019-10127)

WordPress Plugin Slider Hero with Animation, Video Background Unspecified Vulnerability (5.5.0)

PHP CVE-2013-7345 Vulnerability (CVE-2013-7345)

WordPress Plugin File Manager Directory Traversal (7.2.5)

Severity

High

Classification

CVE-2016-9861 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities