CVE-2017-1000013

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness

• CWE-601

• http://www.securityfocus.com/bid/95720Third Party Advisory, VDB Entry
• https://www.phpmyadmin.net/security/PMASA-2017-1Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95720Third Party Advisory, VDB Entry
• https://www.phpmyadmin.net/security/PMASA-2017-1Patch, Vendor Advisory

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000007txAWS (all current versions) fail to perform complete certif…
• CVE-2017-1000008Chyrp Lite version 2016.04 is vulnerable to a CSRF in the us…
• CVE-2017-1000009Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable…9.8
• CVE-2017-1000010Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking …7.8
• CVE-2017-1000011MyWebSQL version 3.6 is vulnerable to stored XSS in the data…
• CVE-2017-1000012MySQL Dumper version 1.24 is vulnerable to stored XSS when d…
• CVE-2017-1000014phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weaknes…
• CVE-2017-1000015phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injecti…
• CVE-2017-1000016A weakness was discovered where an attacker can inject arbit…
• CVE-2017-1000017phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness whe…
• CVE-2017-1000018phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack…
• CVE-2017-1000019Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…