CVE-2016-9865

Critical

Published: 11/12/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in phpMyAdmin due to a bug in serialized string parsing, allowing bypass of the protection offered by the PMA_safeUnserialize() function.

Risk Assessment

Organizations using affected versions of phpMyAdmin may be vulnerable to attacks that allow unauthorized access to data.

Recommendation

It is recommended to upgrade phpMyAdmin to version 4.6.5 or later, 4.4.15.9 or later, and 4.0.10.18 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible to bypass the protection offered by PMA_safeUnserialize() function. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.