Vulnerability Database

315,050

Total vulnerabilities in the database

CVE-2016-2562

The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x before 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle attackers to spoof these servers and obtain sensitive information via a crafted certificate.

  • Published: Mar 1, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-2562
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:N

CWEs:

Software From Fixed in
Composer icon phpmyadmin / phpmyadmin 4.5.0-rc1 4.5.0-rc1.x
Composer icon phpmyadmin / phpmyadmin 4.5.0-beta1 4.5.0-beta1.x
Composer icon phpmyadmin / phpmyadmin 4.5.4 4.5.4.x
Composer icon phpmyadmin / phpmyadmin 4.5.3.1 4.5.3.1.x
Composer icon phpmyadmin / phpmyadmin 4.5.1 4.5.1.x
Composer icon phpmyadmin / phpmyadmin 4.5.0.2 4.5.0.2.x
Composer icon phpmyadmin / phpmyadmin 4.5.2 4.5.2.x
Composer icon phpmyadmin / phpmyadmin 4.5.0 4.5.0.x
Composer icon phpmyadmin / phpmyadmin 4.5.0-beta2 4.5.0-beta2.x
Composer icon phpmyadmin / phpmyadmin 4.5.4.1 4.5.4.1.x
Composer icon phpmyadmin / phpmyadmin 4.5.3 4.5.3.x
Composer icon phpmyadmin / phpmyadmin 4.5.5 4.5.5.x
Composer icon phpmyadmin / phpmyadmin 4.5.0.1 4.5.0.1.x