PT-2016-6991 · Phpmyadmin+2 · Phpmyadmin+2

E3Amn2L · Publicado 2016-08-29 · Atualizado 2024-06-15 · CVE-2016-6615

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.6.x prior to 4.6.4 phpMyAdmin versions 4.4.x prior to 4.4.15.8

Description XSS issues were discovered in phpMyAdmin, affecting the navigation pane and database/table hiding feature, the Tracking feature, and the GIS visualization feature. An attacker can trigger an XSS attack using a specially-crafted database name or query.

Recommendations For phpMyAdmin versions 4.6.x prior to 4.6.4, update to version 4.6.4 or later. For phpMyAdmin versions 4.4.x prior to 4.4.15.8, update to version 4.4.15.8 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALT-PU-2016-2421

CVE-2016-6615

DLA-1415-1

MGASA-2016-0291

OPENSUSE-SU-2016_2168-1

OPENSUSE-SU-2024:10054-1

Produtos afetados

Alt Linux

Suse

Phpmyadmin

Referências · 258

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9847 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-6622 · Nota
• https://suse.com/security/cve/CVE-2014-4986 · Nota
• https://suse.com/security/cve/CVE-2016-9859 · Nota
• https://suse.com/security/cve/CVE-2013-4998 · Nota
• https://packages.altlinux.org/ru/vuln/CVE-2016-6615 · Nota
• https://suse.com/security/cve/CVE-2016-5097 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6609 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-6830 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6624 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9862 · Nota de Segurança
• http://phpmyadmin.net/security/PMASA-2016-38 · Nota
• https://suse.com/security/cve/CVE-2014-8960 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6623 · Nota de Segurança
• https://suse.com/security/cve/CVE-2013-5002 · Nota