Multiple Cross-Site Request Forgery Vulnerabilities in phpMyAdmin

🗓️ 28 May 2015 00:00:00Reported by China National Vulnerability DatabaseType

Cross-site forgery flaws in phpMyAdmin allow remote attackers to hijack administrator authentication via config changes.

Reporter	Title	Published	Views	Family All 42
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.10 / 4.2.x < 4.2.13.3 / 4.3.x < 4.3.13.1 / 4.4.x < 4.4.6.1 Multiple Vulnerabilities (PMASA-2015-2, PMASA-2015-3)	25 Feb 201600:00	–	nessus
Tenable Nessus	Debian DLA-336-1 : phpmyadmin security update	29 Oct 201500:00	–	nessus
Tenable Nessus	Debian DSA-3382-1 : phpmyadmin - security update	30 Oct 201500:00	–	nessus
Tenable Nessus	Fedora 22 : phpMyAdmin-4.4.6.1-1.fc22 (2015-8190)	27 May 201500:00	–	nessus
Tenable Nessus	Fedora 21 : phpMyAdmin-4.4.6.1-1.fc21 (2015-8267)	18 May 201500:00	–	nessus
Tenable Nessus	Fedora 20 : phpMyAdmin-4.4.6.1-1.fc20 (2015-8274)	18 May 201500:00	–	nessus
Tenable Nessus	FreeBSD : phpMyAdmin -- XSRF and man-in-the-middle vulnerabilities (c6e31869-f99f-11e4-9f91-6805ca0b3d42)	14 May 201500:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2015-466)	6 Jul 201500:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.10 / 4.2.x < 4.2.13.3 / 4.3.x < 4.3.13.1 / 4.4.x < 4.4.6.1 Multiple Vulnerabilities (PMASA-2015-2, PMASA-2015-3) (deprecated)	20 May 201500:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.10 / 4.2.x < 4.2.13.3 / 4.3.x < 4.3.13.1 / 4.4.x < 4.4.6.1 Multiple Vulnerabilities (PMASA-2015-2, PMASA-2015-3)	27 Nov 202000:00	–	nessus