Description
libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha.
Remediation
References
Related Vulnerabilities
Contao CVE-2024-28234 Vulnerability (CVE-2024-28234)
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35259)
IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-1489)
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-33704)