Lucene search
K

6 matches found

OSV
OSV
added 2016/07/05 1:59 a.m.4 views

CVE-2016-5097

phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading 1 HTTP requests or 2 server logs...

5.3CVSS6.3AI score
Exploits0References8
UbuntuCve
UbuntuCve
added 2016/07/05 1:59 a.m.22 views

CVE-2016-5097

phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading 1 HTTP requests or 2 server logs...

5.3CVSS6.4AI score0.01485EPSS
Exploits0References2
CVE
CVE
added 2016/07/05 1:0 a.m.55 views

CVE-2016-5097

CVE-2016-5097 affects phpMyAdmin prior to 4.6.2 where tokens were placed in query strings and not stripped before external navigation, enabling potential information disclosure via HTTP requests or server logs. Connected advisories confirm impact and recommend upgrading to patched releases (e.g.,...

5.3CVSS5.2AI score0.01485EPSS
Exploits0References8Affected Software1
OpenVAS
OpenVAS
added 2016/06/19 12:0 a.m.19 views

Fedora Update for phpMyAdmin FEDORA-2016-e3240782ec

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.1AI score0.01992EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2016/06/08 12:0 a.m.23 views

Fedora Update for phpMyAdmin FEDORA-2016-cd05bd994a

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.1AI score0.01992EPSS
Exploits0References2
phpMyAdmin
phpMyAdmin
added 2016/05/25 12:0 a.m.36 views

Sensitive Data in URL GET Query Parameters

PMASA-2016-14 Announcement-ID: PMASA-2016-14 Date: 2016-05-25 Updated: 2016-05-30 Summary Sensitive Data in URL GET Query Parameters Description Because user SQL queries are part of the URL, sensitive information made as part of a user query can be exposed by clicking on external links to attacke...

5.3CVSS6.3AI score0.01485EPSS
Exploits0Affected Software1
Rows per page
Query Builder