CVE-2017-1000499

    Dashboard / Vulnerabilities / CVE-2017-1000499

    CVE-2017-1000499

    Published: 3 Jan 2018Last Modified: 8 Jul 2026

    Summary:

    Details: phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.

    References: http://www.securitytracker.com/id/1040163, http://cyberworldmirror.com/vulnerability-phpmyadmin-lets-attacker-perform-drop-table-single-click/, https://www.phpmyadmin.net/security/PMASA-2017-9/, https://www.exploit-db.com/exploits/45284/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 5538c22c142fb735fb0a3f7b5dd5c9f016f0709a
    Fixed -6ba68edd4c94a4d9ca7ff3a4679862a01aae3740

    Affected versions

    RELEASE_4_7_0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High