Lucene search

K
osvGoogleOSV:GHSA-R643-7XFG-PPC5
HistoryMay 17, 2022 - 2:37 a.m.

phpMyAdmin allows to detect if user is logged in

2022-05-1702:37:15
Google
osv.dev
10
phpmyadmin
user login
vulnerability
software
session
username
password
4.6.x
4.4.x
4.0.x

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

29.6%

An issue was discovered in phpMyAdmin. An attacker can determine whether a user is logged in to phpMyAdmin. The user’s session, username, and password are not compromised by this vulnerability. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

29.6%