Lucene search

K
freebsdFreeBSD19B17AB4-51E0-11DB-A5AE-00508D6A62DF
HistorySep 28, 2006 - 12:00 a.m.

phpmyadmin -- XSRF vulnerabilities

2006-09-2800:00:00
vuxml.freebsd.org
10

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.036 Low

EPSS

Percentile

91.6%

phpMyAdmin team reports:

We received a security advisory from Stefan Esser
([email protected]) and we wish to thank him for his
work.
It was possible to inject arbitrary SQL commands by
forcing an authenticated user to follow a crafted link.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchphpmyadmin< 2.9.0.1UNKNOWN

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.036 Low

EPSS

Percentile

91.6%

Related for 19B17AB4-51E0-11DB-A5AE-00508D6A62DF