CVE-2016-6625

Published Dec 11, 2016 CVSS 3.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Description
An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's session, username, and password are not compromised by this vulnerability. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-5106 An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's session, username, and password are not compromised by this vulnerability. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Github GHSA Github GHSA GHSA-r643-7xfg-ppc5 phpMyAdmin allows to detect if user is logged in
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 1:36 AM
Reserved
Aug 6, 2016, 12:00 AM
Status
Modified
Published
Dec 11, 2016, 2:59 AM
Modified
Jun 17, 2026, 12:51 AM