Description
An issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in wrong matches and detection of the username in the rule due to non-constant execution time. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Remediation
References
Related Vulnerabilities
Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.12)
WordPress Plugin AzonPost Cross-Site Scripting (1.3)
TYPO3 Insertion of Sensitive Information into Log File Vulnerability (CVE-2021-32767)
MySQL CVE-2017-10313 Vulnerability (CVE-2017-10313)
WordPress 3.9.x Same Origin Method Execution (SOME) Vulnerability (3.9 - 3.9.11)