Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.5:*:*:*:*:*:*:*

part: a version: 4.6.5 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.305093
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.305095
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.305096
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.305097
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.305099

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000016 vulnerable 2026-06-08 05:08:27.105975 Details available
A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000015 vulnerable 2026-06-08 05:08:27.105402 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000014 vulnerable 2026-06-08 05:08:27.103422 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000013 vulnerable 2026-06-08 05:08:27.101380 Details available
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:05.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6621 vulnerable 2026-06-08 05:08:02.990852 Details available
The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
Published: 2017-01-31T19:00:00.000Z
Updated: 2024-08-06T01:36:29.424Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.