PT-2016-7855 · Phpmyadmin+1 · Phpmyadmin+1

E3Amn2L · Publicado 2016-12-07 · Atualizado 2024-06-15 · CVE-2016-9862

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.6.x prior to 4.6.5

Description An issue was discovered that allows injection of BBCode in the login page with a crafted login request.

Recommendations For versions prior to 4.6.5, update to version 4.6.5 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

ALT-PU-2016-2421

CVE-2016-9862

OPENSUSE-SU-2024:10054-1

Produtos afetados

Alt Linux

Phpmyadmin

Referências · 190

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9847 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-6622 · Nota
• https://suse.com/security/cve/CVE-2014-4986 · Nota
• https://suse.com/security/cve/CVE-2016-9859 · Nota
• https://suse.com/security/cve/CVE-2013-4998 · Nota
• https://suse.com/security/cve/CVE-2016-5097 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6609 · Nota de Segurança
• https://suse.com/security/cve/CVE-2015-6830 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6624 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9862 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-8960 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6623 · Nota de Segurança
• https://suse.com/security/cve/CVE-2013-5002 · Nota
• https://suse.com/security/cve/CVE-2014-8326 · Nota
• https://suse.com/security/cve/CVE-2014-9218 · Nota