kritik
CVE-2016-9866
An issue was discovered in phpMyAdmin. When the arg_separator is diffe ...
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, GHSA. Daha düşük diyenler: Ubuntu (orta).
Açıklama
An issue was discovered in phpMyAdmin. When the arg_separator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| composer::GitHub Security Advisory Composer | phpmyadmin/phpmyadmin | 4.6.5, 4.4.15.9, 4.0.10.18 |
| alpine 3.10 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.11 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.12 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.13 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.14 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.15 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.16 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.17 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.18 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.19 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.2 | phpmyadmin | 4.4.15.9-r0 |
31 kaynaktaki 31 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| composer::GitHub Security Advisory Composer | phpmyadmin/phpmyadmin | 4.6.5, 4.4.15.9, 4.0.10.18 |
| alpine 3.10 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.11 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.12 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.13 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.14 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.15 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.16 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.17 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.18 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.19 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.2 | phpmyadmin | 4.4.15.9-r0 |
| alpine 3.20 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.21 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.22 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.23 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.24 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.4 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.5 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.6 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.7 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.8 | phpmyadmin | 4.6.5.2-r0 |
| alpine 3.9 | phpmyadmin | 4.6.5.2-r0 |
| alpine edge | phpmyadmin | 4.6.5.2-r0 |
| debian 11 | phpmyadmin | 4:4.6.5.1-1 |
| debian 12 | phpmyadmin | 4:4.6.5.1-1 |
| debian 13 | phpmyadmin | 4:4.6.5.1-1 |
| debian 14 | phpmyadmin | 4:4.6.5.1-1 |
| echo | phpmyadmin | 4:4.6.5.1-1 |
| ubuntu 14.04-ESM | phpmyadmin | 4:4.0.10-1ubuntu0.1+esm3 |
| ubuntu 16.04-ESM | phpmyadmin | 4:4.5.4.1-2ubuntu2.1+esm5 |
Referanslar
- http://www.securityfocus.com/bid/94536
- https://github.com/phpmyadmin/composer
- https://nvd.nist.gov/vuln/detail/CVE-2016-9866
- https://security.gentoo.org/glsa/201701-32
- https://ubuntu.com/security/notices/USN-4843-1
- https://web.archive.org/web/20210123194736/http://www.securityfocus.com/bid/94536
- https://www.cve.org/CVERecord?id=CVE-2016-9866
- https://www.phpmyadmin.net/security/PMASA-2016-71