CVE-2016-6626 Open redirect in n/a
An attacker can redirect users to malicious web pages via phpMyAdmin, potentially facilitating phishing attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2016-6626?
CVE-2016-6626 is a medium-severity vulnerability in Phpmyadmin Phpmyadmin, published on 11 Dec 2016. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An issue was discovered in phpMyAdmin. An attacker could redirect a user to a malicious web page. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Weakness: CWE-254
Which versions are affected by CVE-2016-6626?
It affects 1 product.
Products include Phpmyadmin Phpmyadmin.
How do I fix CVE-2016-6626?
Upgrade to a fixed version.
Is CVE-2016-6626 being exploited?
There is no known exploitation of CVE-2016-6626 in the wild and no public exploit code.
Other vulnerabilities in Phpmyadmin Phpmyadmin
Sources
Also known as ALPINE-CVE-2016-6626, DEBIAN-CVE-2016-6626, GHSA-gv8h-mg99-wgj9, UBUNTU-CVE-2016-6626.