Search for packages
| purl | pkg:deb/debian/phpmyadmin@4:4.6.6-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-24e9-fnt7-jqdu | Improper Input Validation phpMyAdmin is vulnerable to a DoS attack in the replication status by using a specially crafted table name. |
CVE-2017-1000018
GHSA-47qr-f86f-3wm4 |
| VCID-4awg-qnjf-4ua5 | Improper Input Validation A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. |
CVE-2017-1000016
GHSA-j2cq-h6v2-f875 |
| VCID-7h9b-a8dp-57hp | Cross-site Scripting phpMyAdmin is vulnerable to a CSS injection attack through crafted cookie parameters. |
CVE-2017-1000015
GHSA-3fgq-cmr4-97rr |
| VCID-7n1n-uj91-8ugg | phpMyAdmin server-side request forgery (SSRF) The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors. |
CVE-2016-6621
GHSA-44vv-mm86-7cg6 |
| VCID-b5d2-5bfb-bbgz | Server-Side Request Forgery (SSRF) phpMyAdmin is vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server. |
CVE-2017-1000017
GHSA-99xj-xqc9-98hr |
| VCID-f4d7-69e8-sqej | The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code. |
CVE-2015-8980
|
| VCID-uw6h-fpzy-x3ap | URL Redirection to Untrusted Site (Open Redirect) phpMyAdmin is vulnerable to an open redirect weakness. |
CVE-2017-1000013
GHSA-5h5m-fj48-qpjw |
| VCID-zreq-41ja-pbf1 | Improper Input Validation phpMyAdmin is vulnerable to a DoS weakness in the table editing functionality. |
CVE-2017-1000014
GHSA-9hrc-rwrq-v6mh |