PT-2018-13112 · Phpmyadmin+2 · Phpmyadmin+2

Madhura Jayaratne · Publicado 2018-08-24 · Atualizado 2024-06-15 · CVE-2018-15605

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.8.3

Description A Cross-Site Scripting issue has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature.

Recommendations For versions prior to 4.8.3, update to version 4.8.3 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALT-PU-2018-2224

CVE-2018-15605

GHSA-C958-4J9X-Q7W4

OPENSUSE-SU-2018_2525-1

OPENSUSE-SU-2024:11171-1

Produtos afetados

Alt Linux

Suse

Phpmyadmin

Referências · 47

• https://github.com/phpmyadmin/phpmyadmin/commit/00d90b3ae415b31338f76263359467a9fbebd0a1 · Correção
• https://github.com/phpmyadmin/composer · Nota
• https://suse.com/security/cve/CVE-2018-10188 · Nota
• https://suse.com/security/cve/CVE-2018-15605.html · Nota
• https://suse.com/security/cve/CVE-2017-1000014 · Nota
• https://suse.com/security/cve/CVE-2018-19970 · Nota
• https://suse.com/security/cve/CVE-2019-12922 · Nota
• https://suse.com/security/cve/CVE-2017-1000013 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/E3IW5S5GXGU2Q5CBLWWZOVRFDRVBIIBZ · Nota
• https://phpmyadmin.net/security/PMASA-2018-5 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-18622 · Nota
• https://osv.dev/vulnerability/CVE-2018-15605 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-10803 · Nota
• https://suse.com/security/cve/CVE-2017-1000016 · Nota
• https://suse.com/security/cve/CVE-2019-11768 · Nota