cvedb.io
CVE-2016-9861
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2016-12-11T03:00:01.650 · Last modified 2026-06-17T00:56:41.417

Summary

An issue was discovered in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

Affected products

phpmyadmin — phpmyadmin

Does this affect you?

Add your gear to cvedb and we'll alert you only when phpmyadmin ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.