PT-2017-9003 · Phpmyadmin+2 · Phpmyadmin+2

E3Amn2L

·

Publicado

2014-05-05

·

Atualizado

2024-06-15

·

CVE-2016-6621

CVSS v3.1

8.6

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.0.10.19 phpMyAdmin versions 4.4.x prior to 4.4.15.10 phpMyAdmin versions 4.6.x prior to 4.6.6
Description The issue allows remote attackers to conduct server-side request forgery (SSRF) attacks. No information is provided about the estimated number of potentially affected devices or real-world incidents.
Recommendations For versions prior to 4.0.10.19, update to version 4.0.10.19 or later. For versions 4.4.x prior to 4.4.15.10, update to version 4.4.15.10 or later. For versions 4.6.x prior to 4.6.6, update to version 4.6.6 or later.

Exploit

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

ALT-PU-2014-1591
ALT-PU-2016-1758
CVE-2016-6621
DLA-1415-1
DLA-834-1
GHSA-44VV-MM86-7CG6
MGASA-2017-0038
OPENSUSE-SU-2016_2168-1
OPENSUSE-SU-2024:10054-1

Produtos afetados

Alt Linux
Suse
Phpmyadmin