Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.17:*:*:*:*:*:*:*

part: a version: 4.0.10.17 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304115
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304117
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304118
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.304120
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.304121

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000015 vulnerable 2026-06-08 05:08:27.104771 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000014 vulnerable 2026-06-08 05:08:27.102809 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000013 vulnerable 2026-06-08 05:08:27.090311 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9866 vulnerable 2026-06-08 05:08:24.691399 Details available
An issue was discovered in phpMyAdmin. When the arg_separator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Published: 2016-12-11T02:00:00.000Z
Updated: 2024-08-06T03:07:30.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9865 vulnerable 2026-06-08 05:08:24.688370 Details available
An issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible to bypass the protection offered by PMA_safeUnserialize() function. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Published: 2016-12-11T02:00:00.000Z
Updated: 2024-08-06T02:59:03.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9864 vulnerable 2026-06-08 05:08:24.687139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9861 vulnerable 2026-06-08 05:08:24.684148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9860 vulnerable 2026-06-08 05:08:24.681033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9859 vulnerable 2026-06-08 05:08:24.679664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9858 vulnerable 2026-06-08 05:08:24.677749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9857 vulnerable 2026-06-08 05:08:24.675394 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9856 vulnerable 2026-06-08 05:08:24.673551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9850 vulnerable 2026-06-08 05:08:24.666722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9849 vulnerable 2026-06-08 05:08:24.664296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9848 vulnerable 2026-06-08 05:08:24.662747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9847 vulnerable 2026-06-08 05:08:24.646832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.