Search for packages
| purl | pkg:composer/phpmyadmin/phpmyadmin@4.4.6%2B1 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3yp5-vqej-r7hh
Aliases: CVE-2016-2040 GHSA-pw34-qf6c-84fc |
Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin allow remote authenticated users to inject arbitrary web script or HTML. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-7h9b-a8dp-57hp
Aliases: CVE-2017-1000015 GHSA-3fgq-cmr4-97rr |
Cross-site Scripting phpMyAdmin is vulnerable to a CSS injection attack through crafted cookie parameters. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-uw6h-fpzy-x3ap
Aliases: CVE-2017-1000013 GHSA-5h5m-fj48-qpjw |
URL Redirection to Untrusted Site (Open Redirect) phpMyAdmin is vulnerable to an open redirect weakness. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-w37b-ep3h-tfaz
Aliases: CVE-2016-2041 GHSA-8m97-xc46-rw9w |
Covert Timing Channel `libraries/common.inc.php` in phpMyAdmin does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier for remote attackers to bypass intended access restrictions by measuring time differences. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-zreq-41ja-pbf1
Aliases: CVE-2017-1000014 GHSA-9hrc-rwrq-v6mh |
Improper Input Validation phpMyAdmin is vulnerable to a DoS weakness in the table editing functionality. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 22 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||