PT-2016-7855 · Phpmyadmin+1 · Phpmyadmin+1

E3Amn2L · Published 2016-12-07 · Updated 2024-06-15 · CVE-2016-9862

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.6.x prior to 4.6.5

Description An issue was discovered that allows injection of BBCode in the login page with a crafted login request.

Recommendations For versions prior to 4.6.5, update to version 4.6.5 or later to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

ALT-PU-2016-2421

CVE-2016-9862

OPENSUSE-SU-2024:10054-1

Affected Products

Alt Linux

Phpmyadmin

References · 190

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9847 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6609 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6624 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9862 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6623 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6606 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9855 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6614 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6610 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6616 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6619 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6630 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9857 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6612 · Security Note
• https://errata.altlinux.org/ALT-PU-2016-2421 · Vendor Advisory