CVE-2016-6624

An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules. When phpMyAdmin is used with IPv6 in a proxy server environment, and the proxy server is in the allowed range but the attacking computer is not allowed, this vulnerability can allow the attacking computer to connect despite the IP rules. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

• CWE-254

• http://www.securityfocus.com/bid/92489Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
• https://security.gentoo.org/glsa/201701-32
• https://www.phpmyadmin.net/security/PMASA-2016-47Patch, Vendor Advisory
• http://www.securityfocus.com/bid/92489Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
• https://security.gentoo.org/glsa/201701-32
• https://www.phpmyadmin.net/security/PMASA-2016-47Patch, Vendor Advisory

Published

Dec 11, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6618An issue was discovered in phpMyAdmin. The transformation fe…
• CVE-2016-6619An issue was discovered in phpMyAdmin. In the user interface…
• CVE-2016-6620An issue was discovered in phpMyAdmin. Some data is passed t…
• CVE-2016-6621The setup script for phpMyAdmin before 4.0.10.19, 4.4.x befo…
• CVE-2016-6622An issue was discovered in phpMyAdmin. An unauthenticated us…
• CVE-2016-6623An issue was discovered in phpMyAdmin. An authorized user ca…
• CVE-2016-6625An issue was discovered in phpMyAdmin. An attacker can deter…
• CVE-2016-6626An issue was discovered in phpMyAdmin. An attacker could red…
• CVE-2016-6627An issue was discovered in phpMyAdmin. An attacker can deter…
• CVE-2016-6628An issue was discovered in phpMyAdmin. An attacker may be ab…
• CVE-2016-6629An issue was discovered in phpMyAdmin involving the $cfg['Ar…
• CVE-2016-6630An issue was discovered in phpMyAdmin. An authenticated user…