CVE-2016-9851

Published: Dec 11, 2016Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to bypass the logout timeout. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected.

Affected (33)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.4.0
Phpmyadmin Phpmyadmin	Version 4.4.1.1
Phpmyadmin Phpmyadmin	Version 4.4.10
Phpmyadmin Phpmyadmin	Version 4.4.11
Phpmyadmin Phpmyadmin	Version 4.4.12
Phpmyadmin Phpmyadmin	Version 4.4.13.1
Phpmyadmin Phpmyadmin	Version 4.4.13
Phpmyadmin Phpmyadmin	Version 4.4.14.1
Phpmyadmin Phpmyadmin	Version 4.4.14
Phpmyadmin Phpmyadmin	Version 4.4.15.1
Phpmyadmin Phpmyadmin	Version 4.4.15.2
Phpmyadmin Phpmyadmin	Version 4.4.15.3
Phpmyadmin Phpmyadmin	Version 4.4.15.4
Phpmyadmin Phpmyadmin	Version 4.4.15.5
Phpmyadmin Phpmyadmin	Version 4.4.15.6
Phpmyadmin Phpmyadmin	Version 4.4.15.7
Phpmyadmin Phpmyadmin	Version 4.4.15.8
Phpmyadmin Phpmyadmin	Version 4.4.15
Phpmyadmin Phpmyadmin	Version 4.4.1
Phpmyadmin Phpmyadmin	Version 4.4.2
Phpmyadmin Phpmyadmin	Version 4.4.3
Phpmyadmin Phpmyadmin	Version 4.4.4
Phpmyadmin Phpmyadmin	Version 4.4.5
Phpmyadmin Phpmyadmin	Version 4.4.6.1
Phpmyadmin Phpmyadmin	Version 4.4.6
Phpmyadmin Phpmyadmin	Version 4.4.7
Phpmyadmin Phpmyadmin	Version 4.4.8
Phpmyadmin Phpmyadmin	Version 4.4.9

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.6.0
Phpmyadmin Phpmyadmin	Version 4.6.1
Phpmyadmin Phpmyadmin	Version 4.6.2
Phpmyadmin Phpmyadmin	Version 4.6.3
Phpmyadmin Phpmyadmin	Version 4.6.4