Description
An issue was discovered in phpMyAdmin involving the $cfg['ArbitraryServerRegexp'] configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Remediation
References
Related Vulnerabilities
osCommerce Other Vulnerability (CVE-2003-1219)
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.10)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-9585)
WordPress Plugin Colorful Categories Cross-Site Request Forgery (2.0.14)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-50522)