https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:01:55 +0000 https://cve.radiocsirt.org/vuln/cve-2017-18264 <p>An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg[&#39;Servers&#39;][$i][&#39;AllowNoPassword&#39;] = false are bypassed under certain PHP versions (e.g., version 5). This can allow the login of users who have no password set even if the administrator has set $cfg[&#39;Servers&#39;][$i][&#39;AllowNoPassword&#39;] to false (which is also the default). This occurs because some implementations of the PHP substr function return false when given &#39;&#39; as the first argument.</p> <p>An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictions caused by $cfg[&#39;Servers&#39;][$i][&#39;AllowNoPassword&#39;] = false are bypassed under certain PHP versions (e.g., version 5). This can allow the login of users who have no password set even if the administrator has set $cfg[&#39;Servers&#39;][$i][&#39;AllowNoPassword&#39;] to false (which is also the default). This occurs because some implementations of the PHP substr function return false when given &#39;&#39; as the first argument.</p> https://cve.radiocsirt.org/vuln/cve-2017-18264