Lucene search
+L

6792 matches found

osv_cve
osv_cve
•added 2018/02/21 3:29 p.m.•22 views

CVE-2018-7260

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS5.5AI score
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2018/02/21 3:29 p.m.•15 views

UBUNTU-CVE-2018-7260

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS6.5AI score0.01602EPSS
SaveExploits1References7
osv_debian
osv_debian
•added 2018/02/21 3:29 p.m.•13 views

DEBIAN-CVE-2018-7260

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS5.1AI score0.01602EPSS
SaveExploits1References1
NVD
NVD
•added 2018/02/21 3:29 p.m.•25 views

CVE-2018-7260

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS5.2AI score0.01602EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2018/02/21 3:00 p.m.•52 views

CVE-2018-7260

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.2AI score0.01602EPSS
SaveExploits1References4
Mend
Mend
•added 2018/02/21 3:00 p.m.•5 views

CVE-2018-7260

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS0.01602EPSS
SaveExploits1References8
CVE
CVE
•added 2018/02/21 3:00 p.m.•127 views

CVE-2018-7260

CVE-2018-7260 affects phpMyAdmin (db_central_columns.php) and is a cross-site scripting (XSS) flaw in versions prior to 4.7.8. The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, with impact described in the sources as XSS and partial integrity im...

5.4CVSS5AI score0.01602EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
•added 2018/02/21 3:00 p.m.•106 views

CVE-2018-7260

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS5.4AI score0.01602EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/21 12:00 a.m.•5 views

CVE-2018-7260: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dbcentralcolumns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

5.4CVSS6.6AI score0.01602EPSS
SaveExploits1References2
FreeBSD
FreeBSD
•added 2018/02/21 12:00 a.m.•50 views

phpMyAdmin -- self XSS in central columns feature

The phpMyAdmin team reports: Summary Self XSS in central columns feature Description A self-cross site scripting XSS vulnerability has been reported relating to the central columns feature. Severity We consider this vulnerability to be of moderate severity. Mitigation factor A valid token must be...

5.4CVSS5.5AI score0.01602EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/02/21 12:00 a.m.•6 views

PT-2018-17981

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.7.8 ALT Linux affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web script or...

9.8CVSS0.9835EPSS
SaveExploits47References82
GithubExploit
GithubExploit
•added 2018/02/03 10:26 p.m.•70 views

Exploit for Code Injection in Phpmyadmin

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php'...

9.8CVSS8.1AI score0.96565EPSS
SaveExploits18
GithubExploit
GithubExploit
•added 2018/02/03 10:26 p.m.•85 views

Exploit for Code Injection in Phpmyadmin

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php'...

9.8CVSS8.1AI score0.96565EPSS
SaveExploits18
CNVD
CNVD
•added 2018/01/19 12:00 a.m.•11 views

phpMyAdmin Cross-Site Request Forgery Vulnerability (CNVD-2018-04307)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A cross-site request forgery vulnerability exists in phpMyAdmin due to the program failing to properly validate HTTP requests. A remote attacker could exploit the vulnerability to perform certain...

6.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2018/01/15 12:00 a.m.•21 views

Fedora 27 : phpMyAdmin (2017-cad79c7c6c)

Upstream announcement : Welcome to phpMyAdmin 4.7.7, a regular maintenance release containing bug fixes and a security fix. The security vulnerability is a XSRF/CSRF flaw; you can read more at https://www.phpmyadmin.net/security/PMASA-2017-9/ As a result of this, we recommend all users upgrade...

5.6AI score
SaveExploits0References2
Check Point Advisories
Check Point Advisories
•added 2018/01/10 12:00 a.m.•67 views

Web servers PHPMyAdmin Suspicious Table Hyperlink (CVE-2017-1000499)

A PhpMyAdmin user could be subject to a phishing attack. This is due to the way PhpMyAdmin handles modify requests. A successful attack could lead to malicious SQL command execution...

6.8CVSS3.2AI score0.08464EPSS
SaveExploits5
OpenVAS
OpenVAS
•added 2018/01/07 12:00 a.m.•40 views

Debian: Security Advisory (DLA-834-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8AI score0.01927EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2018/01/05 12:00 a.m.•26 views

Fedora Update for phpMyAdmin FEDORA-2017-481515e199

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/01/05 12:00 a.m.•17 views

Fedora Update for phpMyAdmin FEDORA-2017-cad79c7c6c

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
CNVD
CNVD
•added 2018/01/05 12:00 a.m.•19 views

phpMyAdmin Cross-Site Request Forgery Vulnerability (CNVD-2018-03075)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site request forgery vulnerability exists in...

8.8CVSS7.4AI score0.08464EPSS
SaveExploits5References1
Rows per page
Query Builder