PT-2015-7651 · Phpmyadmin · Phpmyadmin

Lalith Rallabhandi · Publicado 2015-10-28 · Atualizado 2024-06-15 · CVE-2015-7873

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.4.x through 4.4.15.0 phpMyAdmin versions 4.5.x through 4.5.0

Description The issue is related to the redirection feature in the url.php file, which allows remote attackers to spoof content. This is achieved by manipulating the url parameter.

Recommendations For phpMyAdmin versions 4.4.x through 4.4.15.0, update to version 4.4.15.1 or later. For phpMyAdmin versions 4.5.x through 4.5.0, update to version 4.5.1 or later.

Correção

RCE

XSS

Enumeração de Fraquezas

CWE-20

CWE-254

CWE-79

Identificadores relacionados

CVE-2015-7873

DSA-3382-1

GHSA-5PMG-QH2C-7J24

MGASA-2015-0419

OPENSUSE-SU-2024:10054-1

Produtos afetados

Phpmyadmin

Referências · 166

• https://github.com/phpmyadmin/phpmyadmin · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/cd097656758f981f80fb9029c7d6b4294582b706 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/2b31866fe0b30b867aaf5b5fedb11adb354e037f · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/095729d81205f15f40d216d25917017da4c2fff8 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/62b2c918d26cc78d1763945e3d44d1a63294a819 · Nota
• https://github.com/phpmyadmin/phpmyadmin/commit/1ac863c7573d12012374d5d41e5c7dc5505ea6e1 · Nota
• https://suse.com/security/cve/CVE-2013-4995 · Nota
• https://suse.com/security/cve/CVE-2014-4955 · Nota
• https://packages.debian.org/src:phpmyadmin · Nota
• https://suse.com/security/cve/CVE-2016-6611 · Nota
• https://suse.com/security/cve/CVE-2016-6632 · Nota
• https://suse.com/security/cve/CVE-2016-6628 · Nota
• https://suse.com/security/cve/CVE-2016-6607 · Nota
• https://ubuntu.com/security/CVE-2015-7873 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-2045 · Nota