Wind River Support Network


LIN6-12141 : Security Advisory - phpmyadmin - CVE-2016-9849

Created: Dec 15, 2016    Updated: Dec 3, 2018
Resolved Date: Dec 27, 2016
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']) and deny rules for username by using Null Byte in the username. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to, and 4.0.x versions (prior to are affected.

Other Downloads

Live chat