Lucene search

K
osvGoogleOSV:GHSA-J2CQ-H6V2-F875
HistoryMay 17, 2022 - 2:25 a.m.

phpMyAdmin Cookie attribute injection attack

2022-05-1702:25:46
Google
osv.dev
9
phpmyadmin
cookie
attribute
injection
attack
weakness
discovered
attacker
arbitrary values
browser cookies
incomplete fix

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

39.4%

A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

39.4%