Lucene search
FreeBSDCC627E6C-3B89-11E4-B629-6805CA0B3D42HistorySep 13, 2014 - 12:00 a.m.
phpMyAdmin -- XSRF/CSRF due to DOM based XSS in the micro history feature
2014-09-1300:00:00
vuxml.freebsd.org
16
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
60.4%
The phpMyAdmin development team reports:
XSRF/CSRF due to DOM based XSS in the micro history feature.
By deceiving a logged-in user to click on a crafted URL,
it is possible to perform remote code execution and in some
cases, create a root account due to a DOM based XSS
vulnerability in the micro history feature.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | phpmyadmin | = 4.2.0 | UNKNOWN |
| FreeBSD | any | noarch | phpmyadmin | < 4.2.8.1 | UNKNOWN |
Related
openvas
openvas
phpMyAdmin 'CVE-2014-6300' Cross-Site Scripting (XSS) Vulnerability (Linux)
2017-08-21 00:00:00
Fedora Update for phpMyAdmin FEDORA-2014-10989
2014-10-01 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-11-08 11:55:00
osv
osv
phpMyAdmin micro history Implementation XSS Vulnerability
2022-05-14 02:09:44
nessus
nessus
securityvulns
securityvulns
[ MDVSA-2014:183 ] phpmyadmin
2014-10-14 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: phpMyAdmin-4.2.8.1-2.fc19
2014-09-25 10:40:40
[SECURITY] Fedora 21 Update: phpMyAdmin-4.2.8.1-2.fc21
2014-09-23 04:32:06
[SECURITY] Fedora 20 Update: phpMyAdmin-4.2.8.1-2.fc20
2014-09-25 10:43:07
cve
cve
CVE-2014-6300
2014-11-08 11:55:00
github
github
phpMyAdmin micro history Implementation XSS Vulnerability
2022-05-14 02:09:44
phpmyadmin
phpmyadmin
XSRF/CSRF due to DOM based XSS in the micro history feature
2014-09-13 00:00:00
ubuntucve
ubuntucve
CVE-2014-6300
2014-11-08 00:00:00
debiancve
debiancve
CVE-2014-6300
2014-11-08 11:55:00
mageia
mageia
Updated phpmyadmin package fix CVE-2014-6300
2014-09-22 12:31:24
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2015-05-31 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
60.4%
Related for CC627E6C-3B89-11E4-B629-6805CA0B3D42