CVE-2016-9855

An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. During an execution timeout in the export functionality, the errors containing the full path of the directory of phpMyAdmin are written to the export file. All 4.6.x versions (prior to 4.6.5), and 4.4.x versions (prior to 4.4.15.9) are affected. This CVE is for the PMA_shutdownDuringExport issue.

• CWE-200

• http://www.securityfocus.com/bid/94527Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201701-32
• https://www.phpmyadmin.net/security/PMASA-2016-63Patch, Vendor Advisory
• http://www.securityfocus.com/bid/94527Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201701-32
• https://www.phpmyadmin.net/security/PMASA-2016-63Patch, Vendor Advisory

Published

Dec 11, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9849An issue was discovered in phpMyAdmin. It is possible to byp…
• CVE-2016-9850An issue was discovered in phpMyAdmin. Username matching for…
• CVE-2016-9851An issue was discovered in phpMyAdmin. With a crafted reques…
• CVE-2016-9852An issue was discovered in phpMyAdmin. By calling some scrip…
• CVE-2016-9853An issue was discovered in phpMyAdmin. By calling some scrip…
• CVE-2016-9854An issue was discovered in phpMyAdmin. By calling some scrip…
• CVE-2016-9856An XSS issue was discovered in phpMyAdmin because of an impr…
• CVE-2016-9857An issue was discovered in phpMyAdmin. XSS is possible becau…
• CVE-2016-9858An issue was discovered in phpMyAdmin. With a crafted reques…
• CVE-2016-9859An issue was discovered in phpMyAdmin. With a crafted reques…
• CVE-2016-9860An issue was discovered in phpMyAdmin. An unauthenticated us…
• CVE-2016-9861An issue was discovered in phpMyAdmin. Due to the limitation…