Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14:*:*:*:*:*:*:*

part: a version: 4.4.14 update: *

VendorPhpmyadmin (a60852d8-fb42-5cb2-9d73-8590e820f745)
ProductPhpmyadmin (7cedec45-6907-5c63-9c4a-c7029e14bff6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304766
pkg:docker/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304768
pkg:github/phpmyadmin/phpmyadmin purl2cpe 2026-06-01 10:12:58.304769
pkg:rpm/fedora/phpmyadmin purl2cpe 2026-06-01 10:12:58.304770
pkg:rpm/opensuse/phpmyadmin purl2cpe 2026-06-01 10:12:58.304772

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9866 vulnerable 2026-06-08 05:08:24.690582 Details available
An issue was discovered in phpMyAdmin. When the arg_separator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Published: 2016-12-11T02:00:00.000Z
Updated: 2024-08-06T03:07:30.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9865 vulnerable 2026-06-08 05:08:24.688837 Details available
An issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible to bypass the protection offered by PMA_safeUnserialize() function. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Published: 2016-12-11T02:00:00.000Z
Updated: 2024-08-06T02:59:03.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9864 vulnerable 2026-06-08 05:08:24.686237 Details available
An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statements in the tracking functionality that would run with the privileges of the control user. This gives read and write access to the tables of the configuration storage database, and if the control user has the necessary privileges, read access to some tables of the MySQL database. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Published: 2016-12-11T02:00:00.000Z
Updated: 2024-08-06T02:59:03.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9861 vulnerable 2026-06-08 05:08:24.683181 Details available
An issue was discovered in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Published: 2016-12-11T02:00:00.000Z
Updated: 2024-08-06T02:59:03.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9860 vulnerable 2026-06-08 05:08:24.682042 Details available
An issue was discovered in phpMyAdmin. An unauthenticated user can execute a denial of service attack when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Published: 2016-12-11T02:00:00.000Z
Updated: 2024-08-06T02:59:03.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9859 vulnerable 2026-06-08 05:08:24.678771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9858 vulnerable 2026-06-08 05:08:24.677025 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9857 vulnerable 2026-06-08 05:08:24.675684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9856 vulnerable 2026-06-08 05:08:24.674043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9855 vulnerable 2026-06-08 05:08:24.672161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9854 vulnerable 2026-06-08 05:08:24.671128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9853 vulnerable 2026-06-08 05:08:24.669898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9852 vulnerable 2026-06-08 05:08:24.668852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9851 vulnerable 2026-06-08 05:08:24.667700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9850 vulnerable 2026-06-08 05:08:24.665943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9849 vulnerable 2026-06-08 05:08:24.664669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9848 vulnerable 2026-06-08 05:08:24.661980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9847 vulnerable 2026-06-08 05:08:24.655840 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6633 vulnerable 2026-06-08 05:08:03.010692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6632 vulnerable 2026-06-08 05:08:03.009184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6631 vulnerable 2026-06-08 05:08:03.007048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6630 vulnerable 2026-06-08 05:08:03.005540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6629 vulnerable 2026-06-08 05:08:03.004135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6628 vulnerable 2026-06-08 05:08:03.002006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6627 vulnerable 2026-06-08 05:08:03.000900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6626 vulnerable 2026-06-08 05:08:02.999337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6625 vulnerable 2026-06-08 05:08:02.997644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6624 vulnerable 2026-06-08 05:08:02.995915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6623 vulnerable 2026-06-08 05:08:02.993514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6622 vulnerable 2026-06-08 05:08:02.992361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6620 vulnerable 2026-06-08 05:08:02.921348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6619 vulnerable 2026-06-08 05:08:02.918942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6618 vulnerable 2026-06-08 05:08:02.917435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6614 vulnerable 2026-06-08 05:08:02.913484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6613 vulnerable 2026-06-08 05:08:02.911123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6612 vulnerable 2026-06-08 05:08:02.910010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6610 vulnerable 2026-06-08 05:08:02.905644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6609 vulnerable 2026-06-08 05:08:02.904020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6606 vulnerable 2026-06-08 05:08:02.889568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2561 vulnerable 2026-06-08 05:07:42.642863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2560 vulnerable 2026-06-08 05:07:42.638231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7873 vulnerable 2026-06-08 05:07:02.224924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6830 vulnerable 2026-06-08 05:06:53.135420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.