Search for packages
| purl | pkg:deb/debian/phpmyadmin@4:4.5.4-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3yp5-vqej-r7hh | Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin allow remote authenticated users to inject arbitrary web script or HTML. |
CVE-2016-2040
GHSA-pw34-qf6c-84fc |
| VCID-but8-t37e-kfdb | phpMyAdmin: Multiple full path disclosure vulnerabilities (PMASA-2016-6) |
CVE-2016-2042
|
| VCID-bwck-hexx-bff8 | Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response. |
CVE-2016-2045
|
| VCID-f7gd-w9r7-xyb2 | phpMyAdmin Cryptographic Vulnerability The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote attackers to guess passwords via a brute-force approach. |
CVE-2016-1927
GHSA-4gmg-gwjh-3mmr |
| VCID-g438-3c4q-9bcf | libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message. |
CVE-2016-2044
|
| VCID-h22a-2v9u-4ucf | Cross-site scripting (XSS) vulnerability in the goToFinish1NF function in js/normalization.js in phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a table name to the normalization page. |
CVE-2016-2043
|
| VCID-jhqf-gw62-9ygq | security update |
CVE-2016-2039
|
| VCID-rggj-3cd7-m7hj | phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message. |
CVE-2016-2038
|
| VCID-w37b-ep3h-tfaz | Covert Timing Channel `libraries/common.inc.php` in phpMyAdmin does not use a constant-time algorithm for comparing CSRF tokens, which makes it easier for remote attackers to bypass intended access restrictions by measuring time differences. |
CVE-2016-2041
GHSA-8m97-xc46-rw9w |