Search for vulnerabilities
Vulnerability details: VCID-f4bk-253j-fkgv
Vulnerability ID VCID-f4bk-253j-fkgv
Aliases CVE-2015-7873
GHSA-5pmg-qh2c-7j24
Summary phpMyAdmin allows remote attackers to spoof content via the url parameter The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-20 Improper Input Validation
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual HIGH http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171311.html
generic_textual HIGH http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171326.html
generic_textual HIGH http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169987.html
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2015-7873
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-5pmg-qh2c-7j24
generic_textual HIGH https://github.com/phpmyadmin/phpmyadmin
generic_textual HIGH https://github.com/phpmyadmin/phpmyadmin/commit/2b31866fe0b30b867aaf5b5fedb11adb354e037f
generic_textual HIGH https://github.com/phpmyadmin/phpmyadmin/commit/cd097656758f981f80fb9029c7d6b4294582b706
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2015-7873
generic_textual HIGH https://web.archive.org/web/20161014120907/http://www.securitytracker.com/id/1034013
generic_textual HIGH https://web.archive.org/web/20200228052850/http://www.securityfocus.com/bid/77299
generic_textual HIGH https://www.phpmyadmin.net/security/PMASA-2015-5
generic_textual HIGH http://www.debian.org/security/2015/dsa-3382
Reference id Reference type URL
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171311.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171326.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169987.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7873.json
https://api.first.org/data/v1/epss?cve=CVE-2015-7873
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8958
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9218
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3902
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3903
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6830
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7873
https://github.com/phpmyadmin/phpmyadmin
https://github.com/phpmyadmin/phpmyadmin/commit/2b31866fe0b30b867aaf5b5fedb11adb354e037f
https://github.com/phpmyadmin/phpmyadmin/commit/cd097656758f981f80fb9029c7d6b4294582b706
https://nvd.nist.gov/vuln/detail/CVE-2015-7873
https://web.archive.org/web/20161014120907/http://www.securitytracker.com/id/1034013
https://web.archive.org/web/20200228052850/http://www.securityfocus.com/bid/77299
https://www.phpmyadmin.net/security/PMASA-2015-5
http://www.debian.org/security/2015/dsa-3382
1275108 https://bugzilla.redhat.com/show_bug.cgi?id=1275108
GHSA-5pmg-qh2c-7j24 https://github.com/advisories/GHSA-5pmg-qh2c-7j24
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.66046
EPSS Score 0.00526
Published At Aug. 16, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T09:10:42.410569+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5pmg-qh2c-7j24/GHSA-5pmg-qh2c-7j24.json 37.0.0