Lucene search
GoogleOSV:DLA-336-1HistoryOct 28, 2015 - 12:00 a.m.
phpmyadmin - security update
2015-10-2800:00:00
Google
osv.dev
10
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Several issues have been fixed in phpMyAdmin, the web administration
tool for MySQL.
- CVE-2014-8958
Multiple cross-site scripting (XSS) vulnerabilities. - CVE-2014-9218
Denial of service (resource consumption) via a long password. - CVE-2015-2206
Risk of BREACH attack due to reflected parameter. - CVE-2015-3902
XSRF/CSRF vulnerability in phpMyAdmin setup.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpmyadmin | eq | 4:3.3.7-7 | |
| phpmyadmin | eq | 4:3.3.7-6 | |
| phpmyadmin | eq | 4:3.3.7-3 | |
| phpmyadmin | eq | 4:3.3.7-8 | |
| phpmyadmin | eq | 4:3.3.7-5 |
References
Related
debian
debian
[SECURITY] [DLA 336-1] phpmyadmin security update
2015-10-28 19:55:06
[SECURITY] [DSA 3382-1] phpmyadmin security update
2015-10-28 19:52:25
nessus
nessus
Debian DLA-336-1 : phpmyadmin security update
2015-10-29 00:00:00
Debian DSA-3382-1 : phpmyadmin - security update
2015-10-30 00:00:00
openSUSE Security Update : phpMyAdmin (openSUSE-2015-466)
2015-07-06 00:00:00
osv
osv
phpmyadmin - security update
2015-10-28 00:00:00
phpmyadmin vulnerabilities
2021-03-16 14:27:57
openvas
openvas
Debian Security Advisory DSA 3382-1 (phpmyadmin - security update)
2015-10-28 00:00:00
Debian Security Advisory DSA 3382-1 (phpmyadmin - security update)
2015-10-28 00:00:00
phpMyAdmin Denial-of-Service Vulnerability -01 Dec14
2014-12-26 00:00:00
typo3
typo3
Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)
2014-12-08 00:00:00
prion
prion
Code injection
2014-12-08 11:59:00
Cross site scripting
2014-11-30 11:59:00
Cross site request forgery (csrf)
2015-05-26 15:59:00
exploitpack
exploitpack
phpMyAdmin 4.0.x4.1.x4.2.x - Denial of Service
2014-12-15 00:00:00
cve
cve
mageia
mageia
Updated phpmyadmin package fixes CVE-2014-9218
2014-12-05 18:54:13
Updated phpmyadmin packages fix security vulnerabilities
2015-05-18 22:08:05
Updated phpmyadmin packages fix security vulnerabilities
2014-11-26 20:29:06
phpmyadmin
phpmyadmin
DoS vulnerability with long passwords.
2014-12-03 00:00:00
Multiple XSS vulnerabilities.
2014-11-20 00:00:00
XSRF/CSRF vulnerability in phpMyAdmin setup.
2015-05-13 00:00:00
zdt
zdt
phpMyAdmin 4.0.x, 4.1.x, 4.2.x - DoS
2014-12-16 00:00:00
ubuntucve
ubuntucve
debiancve
debiancve
f5
f5
SOL16494 - phpMyAdmin vulnerability CVE-2015-2206
2015-04-22 00:00:00
K16494 : phpMyAdmin vulnerability CVE-2015-2206
2015-04-22 00:00:00
freebsd
freebsd
phpMyAdmin -- Risk of BREACH attack due to reflected parameter
2015-03-04 00:00:00
phpMyAdmin -- XSS and DoS vulnerabilities
2014-12-03 00:00:00
phpMyAdmin -- XSRF and man-in-the-middle vulnerabilities
2015-05-13 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: phpMyAdmin-4.3.11.1-1.fc22
2015-03-09 08:35:47
[SECURITY] Fedora 20 Update: phpMyAdmin-4.3.11.1-1.fc20
2015-03-14 09:21:26
[SECURITY] Fedora 21 Update: phpMyAdmin-4.3.11.1-1.fc21
2015-03-14 09:22:59
securityvulns
securityvulns
[ MDVSA-2015:186 ] phpmyadmin
2015-05-12 00:00:00
[ MDVSA-2014:243 ] phpmyadmin
2014-12-22 00:00:00
[ MDVSA-2014:228 ] phpmyadmin
2014-12-01 00:00:00
exploitdb
exploitdb
phpMyAdmin 4.0.x/4.1.x/4.2.x - Denial of Service
2014-12-15 00:00:00
gentoo
gentoo
phpMyAdmin: Multiple vulnerabilities
2015-05-31 00:00:00
ubuntu
ubuntu
phpMyAdmin vulnerabilities
2021-03-16 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related for OSV:DLA-336-1