Lucene search
GoogleOSV:DLA-481-1HistoryMay 18, 2016 - 12:00 a.m.
phpmyadmin - security update
2016-05-1800:00:00
Google
osv.dev
5
0.006 Low
EPSS
Percentile
79.0%
This security update fixes a number of security issues in
phpMyAdmin. We recommend you upgrade your phpmyadmin packages.
- CVE-2016-1927
suggestPassword generates weak passphrases - CVE-2016-2038
information disclosure via crafted requests - CVE-2016-2039
weak CSRF token values - CVE-2016-2040
XSS vulnerabilities in authenticated users - CVE-2016-2041
information breach in CSRF token comparison - CVE-2016-2045
XSS injection via crafted SQL queries - CVE-2016-2560
XSS injection
Further information about Debian LTS security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: <https://wiki.debian.org/LTS>
For Debian 7 Wheezy, these issues have been fixed in phpmyadmin version 4:3.4.11.1-2+deb7u3
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpmyadmin | eq | 4:3.4.11.1-2 | |
| phpmyadmin | eq | 4:3.4.11.1-2+deb7u1 | |
| phpmyadmin | eq | 4:3.4.11.1-2+deb7u2 |
References
Related
nessus
nessus
openvas
openvas
Debian: Security Advisory (DLA-481-1)
2023-03-08 00:00:00
phpMyAdmin Multiple Vulnerabilities -01 (Feb 2016)
2016-02-23 00:00:00
Mageia: Security Advisory (MGASA-2016-0051)
2016-02-08 00:00:00
osv
osv
phpmyadmin - regression update
2016-05-18 00:00:00
phpmyadmin - security update
2016-01-30 00:00:00
phpmyadmin - security update
2016-07-24 00:00:00
debian
debian
[SECURITY] [DLA 481-1] phpmyadmin security update
2016-05-18 18:57:16
[SECURITY] [DLA 481-2] phpmyadmin regression update
2016-05-30 18:36:20
[SECURITY] [DLA 406-1] phpmyadmin security update
2016-01-30 22:52:45
mageia
mageia
Updated phpmyadmin/phpseclib packages fix security vulnerability
2016-02-05 20:26:09
Updated phpmyadmin packages fix security vulnerabilities
2016-03-02 21:28:46
f5
f5
K93445609 : phpMyAdmin vulnerabilities
2016-02-29 00:00:00
SOL93445609 - phpMyAdmin vulnerabilities
2016-02-29 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: phpMyAdmin-4.5.4-1.fc22
2016-02-01 06:34:04
[SECURITY] Fedora 23 Update: phpMyAdmin-4.5.4.1-1.fc23
2016-02-03 20:52:02
[SECURITY] Fedora 23 Update: php-udan11-sql-parser-3.4.0-1.fc23
2016-03-09 20:16:08
typo3
typo3
Multiple vulnerabilities in extension phpMyAdmin (phpmyadmin)
2016-03-10 00:00:00
prion
prion
Cross site scripting
2016-03-01 11:59:00
Cross site scripting
2016-02-20 01:59:00
Cross site request forgery (csrf)
2016-02-20 01:59:00
phpmyadmin
phpmyadmin
Multiple full path disclosure vulnerabilities.
2016-01-23 00:00:00
Multiple XSS vulnerabilities.
2016-02-25 00:00:00
Unsafe comparison of XSRF/CSRF token.
2016-01-24 00:00:00
freebsd
freebsd
phpmyadmin -- Multiple XSS vulnerabilities
2016-01-28 00:00:00
phpmyadmin -- Unsafe comparison of XSRF/CSRF token
2016-01-28 00:00:00
phpmyadmin -- Unsafe generation of XSRF/CSRF token
2016-01-28 00:00:00
cve
cve
nvd
nvd
ubuntucve
ubuntucve
debiancve
debiancve
cvelist
cvelist
github
github
phpMyAdmin Unsafe comparison of XSRF/CSRF token
2022-05-14 02:08:30
phpMyAdmin XSS Vulnerability
2022-05-14 02:08:30
phpMyAdmin Cryptographic Vulnerability
2022-05-17 03:43:03