CVE-2016-9864

An issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible to inject SQL statements in the tracking functionality that would run with the privileges of the control user. This gives read and write access to the tables of the configuration storage database, and if the control user has the necessary privileges, read access to some tables of the MySQL database. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.

• CWE-89

• http://www.securityfocus.com/bid/94533
• https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
• https://security.gentoo.org/glsa/201701-32
• https://www.phpmyadmin.net/security/PMASA-2016-69Patch, Vendor Advisory
• http://www.securityfocus.com/bid/94533
• https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
• https://security.gentoo.org/glsa/201701-32
• https://www.phpmyadmin.net/security/PMASA-2016-69Patch, Vendor Advisory

Published

Dec 11, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9858An issue was discovered in phpMyAdmin. With a crafted reques…
• CVE-2016-9859An issue was discovered in phpMyAdmin. With a crafted reques…
• CVE-2016-9860An issue was discovered in phpMyAdmin. An unauthenticated us…
• CVE-2016-9861An issue was discovered in phpMyAdmin. Due to the limitation…
• CVE-2016-9862An issue was discovered in phpMyAdmin. With a crafted login …
• CVE-2016-9863An issue was discovered in phpMyAdmin. With a very large req…
• CVE-2016-9865An issue was discovered in phpMyAdmin. Due to a bug in seria…
• CVE-2016-9866An issue was discovered in phpMyAdmin. When the arg_separato…
• CVE-2016-9867An issue was discovered in EMC ScaleIO versions before 2.0.1…
• CVE-2016-9868An issue was discovered in EMC ScaleIO versions before 2.0.1…
• CVE-2016-9869An issue was discovered in EMC ScaleIO versions before 2.0.1…
• CVE-2016-9870EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2…