CVE-2017-1000013: phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness

Security readout for executives and security teams

This CVE describes an open redirect weakness in phpMyAdmin 4.0, 4.4, and 4.6. An affected phpMyAdmin page could redirect users to an unintended external site, supporting phishing or credential-theft scenarios. The provided sources do not claim code execution, data theft by itself, or active exploitation. Exposure is most likely where organizations still operate phpMyAdmin 4.0, 4.4, or 4.6, especially on internet-accessible administrative portals. Evidence for other affected products or versions is not provided in the source bundle. Treat this as a moderate-priority cleanup item unless phpMyAdmin is publicly reachable. The main business risk is phishing and trust abuse through an administrative domain, not confirmed system compromise from the CVE alone. Mitigation focus: Inventory phpMyAdmin deployments and identify any 4.0, 4.4, or 4.6 instances.; Review phpMyAdmin PMASA-2017-1 for vendor-confirmed remediation and fixed-version guidance.; Prioritize remediation for internet-accessible phpMyAdmin administrative interfaces..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.