7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.008 Low
EPSS
Percentile
81.9%
Multiple vulnerabilities in setup script (CVE-2016-6621 / PMASA-2016-44). Open redirect (PMASA-2017-1). php-gettext code execution (CVE-2015-8980 / PMASA-2017-2). DOS vulnerability in table editing (PMASA-2017-3). CSS injection in themes (PMASA-2017-4). SSRF in replication (PMASA-2017-6). DOS in replication status (PMASA-2017-7).
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 5 | noarch | phpmyadmin | < 4.4.15.10-1 | phpmyadmin-4.4.15.10-1.mga5 |
bugs.mageia.org/show_bug.cgi?id=20169
lists.opensuse.org/opensuse-updates/2017-02/msg00015.html
www.phpmyadmin.net/files/4.4.15.10/
www.phpmyadmin.net/news/2017/1/23/phpmyadmin-466-441510-and-401019-are-released/
www.phpmyadmin.net/security/PMASA-2016-44/
www.phpmyadmin.net/security/PMASA-2017-1/
www.phpmyadmin.net/security/PMASA-2017-2/
www.phpmyadmin.net/security/PMASA-2017-3/
www.phpmyadmin.net/security/PMASA-2017-4/
www.phpmyadmin.net/security/PMASA-2017-6/
www.phpmyadmin.net/security/PMASA-2017-7/
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.008 Low
EPSS
Percentile
81.9%