Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/phpmyadmin/phpmyadmin@4.0.4%2B2
purl pkg:composer/phpmyadmin/phpmyadmin@4.0.4%2B2
Tags Ghost
Next non-vulnerable version 4.9.11
Latest non-vulnerable version 5.2.2
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-7h9b-a8dp-57hp
Aliases:
CVE-2017-1000015
GHSA-3fgq-cmr4-97rr
Cross-site Scripting phpMyAdmin is vulnerable to a CSS injection attack through crafted cookie parameters.
4.0.10+19
Affected by 0 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-uw6h-fpzy-x3ap
Aliases:
CVE-2017-1000013
GHSA-5h5m-fj48-qpjw
URL Redirection to Untrusted Site (Open Redirect) phpMyAdmin is vulnerable to an open redirect weakness.
4.0.10+19
Affected by 0 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
VCID-zreq-41ja-pbf1
Aliases:
CVE-2017-1000014
GHSA-9hrc-rwrq-v6mh
Improper Input Validation phpMyAdmin is vulnerable to a DoS weakness in the table editing functionality.
4.0.10+19
Affected by 0 other vulnerabilities.
4.4.15+10
Affected by 2 other vulnerabilities.
4.6.6
Affected by 2 other vulnerabilities.
4.7.0
Affected by 22 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.