CVE-2017-1000499

phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.

• CWE-352

• http://cyberworldmirror.com/vulnerability-phpmyadmin-lets-attacker-perform-drop-table-single-click/Exploit, Patch, Third Party Advisory
• http://www.securitytracker.com/id/1040163Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45284/Exploit, Third Party Advisory, VDB Entry
• https://www.phpmyadmin.net/security/PMASA-2017-9/Patch, Vendor Advisory
• http://cyberworldmirror.com/vulnerability-phpmyadmin-lets-attacker-perform-drop-table-single-click/Exploit, Patch, Third Party Advisory
• http://www.securitytracker.com/id/1040163Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45284/Exploit, Third Party Advisory, VDB Entry
• https://www.phpmyadmin.net/security/PMASA-2017-9/Patch, Vendor Advisory

Published

Jan 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000493Rocket.Chat Server version 0.59 and prior is vulnerable to a…
• CVE-2017-1000494Uninitialized stack variable vulnerability in NameValueParse…
• CVE-2017-1000495QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-si…
• CVE-2017-1000496Commsy version 9.0.0 is vulnerable to XXE attacks in the con…
• CVE-2017-1000497Pepperminty-Wiki version 0.15 is vulnerable to XXE attacks i…9.8
• CVE-2017-1000498AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the…7.8
• CVE-2017-10005Vulnerability in the Oracle FLEXCUBE Private Banking compone…
• CVE-2017-1000500Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000501Awstats version 7.6 and earlier is vulnerable to a path trav…
• CVE-2017-1000502Users with permission to create or configure agents in Jenki…
• CVE-2017-1000503A race condition during Jenkins 2.81 through 2.94 (inclusive…
• CVE-2017-1000504A race condition during Jenkins 2.94 and earlier; 2.89.1 and…