Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.4:*:*:*:*:*:*:*

part: a version: 4.6.4 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.305087
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.305088
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.305089
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.305091
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.305092

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000016 vulnerable 2026-06-08 05:08:27.105958 Details available
A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000015 vulnerable 2026-06-08 05:08:27.105387 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000014 vulnerable 2026-06-08 05:08:27.103406 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000013 vulnerable 2026-06-08 05:08:27.100361 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9866 vulnerable 2026-06-08 05:08:24.689807 Details available
An issue was discovered in phpMyAdmin. When the arg_separator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Published: 2016-12-11T02:00:00.000Z
Updated: 2024-08-06T03:07:30.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9865 vulnerable 2026-06-08 05:08:24.689072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9864 vulnerable 2026-06-08 05:08:24.685937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9863 vulnerable 2026-06-08 05:08:24.685013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9862 vulnerable 2026-06-08 05:08:24.684615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9861 vulnerable 2026-06-08 05:08:24.683430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9860 vulnerable 2026-06-08 05:08:24.680442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9859 vulnerable 2026-06-08 05:08:24.679746 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9858 vulnerable 2026-06-08 05:08:24.677268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9857 vulnerable 2026-06-08 05:08:24.676044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9856 vulnerable 2026-06-08 05:08:24.673632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9855 vulnerable 2026-06-08 05:08:24.672458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9854 vulnerable 2026-06-08 05:08:24.671377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9853 vulnerable 2026-06-08 05:08:24.670205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9852 vulnerable 2026-06-08 05:08:24.668552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9851 vulnerable 2026-06-08 05:08:24.667946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9850 vulnerable 2026-06-08 05:08:24.665654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9849 vulnerable 2026-06-08 05:08:24.664379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9848 vulnerable 2026-06-08 05:08:24.662245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9847 vulnerable 2026-06-08 05:08:24.630633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6621 vulnerable 2026-06-08 05:08:02.990309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.