Search for packages
| purl | pkg:composer/phpmyadmin/phpmyadmin@4.6.6 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-b5d2-5bfb-bbgz
Aliases: CVE-2017-1000017 GHSA-99xj-xqc9-98hr |
Server-Side Request Forgery (SSRF) phpMyAdmin is vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server. |
Affected by 22 other vulnerabilities. |
|
VCID-hnud-ktgb-dfe6
Aliases: CVE-2017-18264 GHSA-5868-g58j-vrj5 |
Improper Privilege Management An issue was discovered in `libraries/common` which allows users who have no password set to log in even if the administrator has set `$cfg['Servers'][$i]['AllowNoPassword']` to `false` (which is also the default). |
Affected by 22 other vulnerabilities. Affected by 21 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||