Search for packages
| purl | pkg:composer/phpmyadmin/phpmyadmin@4.6.3 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-43mn-rf4g-ayg6
Aliases: CVE-2016-6608 GHSA-jfmj-27fp-qp67 |
phpMyAdmin Cross-site Scripting (XSS) XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected. |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-4k9b-4mxz-87e5
Aliases: CVE-2016-6629 GHSA-567r-vqj7-5cw7 |
phpMyAdmin Authentication Bypass An issue was discovered in phpMyAdmin involving the `$cfg['ArbitraryServerRegexp']` configuration directive. An attacker could reuse certain cookie values in a way of bypassing the servers defined by ArbitraryServerRegexp. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-5qej-xfah-1kaa
Aliases: CVE-2016-6628 GHSA-phhm-63xx-v9rr |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
|
VCID-96h9-nz2g-g3be
Aliases: CVE-2016-6618 GHSA-rv6m-chvv-wmxg |
phpMyAdmin Denial of service (DOS) attack in transformation feature An issue was discovered in phpMyAdmin. The transformation feature allows a user to trigger a denial-of-service (DoS) attack against the server. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-c4mp-bzke-4bhw
Aliases: CVE-2016-6622 GHSA-qf3f-7x69-qfv3 |
phpMyAdmin DoS Vulnerability An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMyAdmin is running with `$cfg['AllowArbitraryServer']=true`. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-e3xu-5ny1-rkab
Aliases: CVE-2016-6633 GHSA-p849-vf5f-f3x7 |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
|
VCID-hy45-dt9r-y3a2
Aliases: CVE-2016-6612 GHSA-fcgm-62p3-f7cm |
phpMyAdmin Local file exposure An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-jxqx-dh1t-eua2
Aliases: CVE-2016-6624 GHSA-mhxj-6vf8-mwv3 |
phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules. When phpMyAdmin is used with IPv6 in a proxy server environment, and the proxy server is in the allowed range but the attacking computer is not allowed, this vulnerability can allow the attacking computer to connect despite the IP rules. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-kzr5-ef5h-dfbr
Aliases: CVE-2016-6613 GHSA-6j2v-g9rg-qcm5 |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
|
VCID-qmfr-5d3y-27au
Aliases: CVE-2016-6609 GHSA-wpww-hx7x-xfjh |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
|
VCID-xrnq-v6ph-97hn
Aliases: CVE-2016-9847 GHSA-9xhq-pm7v-693p |
Affected by 3 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
|
VCID-yvwv-ebhn-x3g5
Aliases: CVE-2016-6625 GHSA-r643-7xfg-ppc5 |
phpMyAdmin allows to detect if user is logged in An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user's session, username, and password are not compromised by this vulnerability. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected. |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
|
VCID-z37z-773u-2fd7
Aliases: CVE-2016-6632 GHSA-426q-975p-w5cr |
Affected by 5 other vulnerabilities. Affected by 22 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||