XSS through FPD

🗓️ 23 Jun 2016 00:00:00Reported by phpMyAdminType

phpmyadmin🔗 www.phpmyadmin.net👁 33 Views

XSS through FPD. Trigger XSS attack through OpenID authentication script. Mitigated by setting html_errors = On or removing ./examples/openid.php file. Upgrade to phpMyAdmin 4.6.3, 4.4.15.7, or 4.0.10.16 or newer

Reporter	Title	Published	Views	Family All 48
Tenable Nessus	phpMyAdmin 4.0.10.x < 4.0.10.16 / 4.4.15.x < 4.4.15.7 / 4.6.x < 4.6.3 Multiple Vulnerabilities	20 Jul 201600:00	–	nessus
Tenable Nessus	Debian DLA-551-1 : phpmyadmin security update	18 Jul 201600:00	–	nessus
Tenable Nessus	Debian DSA-3627-1 : phpmyadmin - security update	25 Jul 201600:00	–	nessus
Tenable Nessus	FreeBSD : phpMyAdmin -- multiple vulnerabilities (e7028e1d-3f9b-11e6-81f9-6805ca0b3d42)	5 Jul 201600:00	–	nessus
Tenable Nessus	GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities	12 Jan 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-804)	29 Jun 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : phpMyAdmin (openSUSE-2016-806)	29 Jun 201600:00	–	nessus
Tenable Nessus	phpMyAdmin 4.0.x < 4.0.10.16 Multiple Vulnerabilities (PMASA-2016-17, PMASA-2016-22 - PMASA-2016-24, PMASA-2016-26 - PMASA-2016-28)	25 Apr 201700:00	–	nessus
Tenable Nessus	phpMyAdmin 4.4.x < 4.4.15.7 Multiple Vulnerabilities (PMASA-2016-17, PMASA-2016-19, PMASA-2016-21 - PMASA-2016-24, PMASA-2016-26 - PMASA-2016-28)	25 Apr 201700:00	–	nessus
Tenable Nessus	phpMyAdmin 4.6.x < 4.6.3 Multiple Vulnerabilities (PMASA-2016-17 - PMASA-2016-28)	25 Apr 201700:00	–	nessus

Vulners

Node

phpmyadmin phpmyadminRange4.6.0–4.6.3

phpmyadmin phpmyadminRange4.4.0–4.4.15.7

phpmyadmin phpmyadminRange4.0.0–4.0.10.16

23 Jun 2016 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 36.1

EPSS0.00424