Description
An issue was discovered in phpMyAdmin. Due to the limitation in URL matching, it was possible to bypass the URL white-list protection. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Resource Management Errors Vulnerability (CVE-2014-3523)
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Request Forgery (1.23.3)
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-7065)