6792 matches found
phpMyAdmin Multiple XSS Vulnerabilities (Aug 2012) - Windows
phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
phpMyAdmin Multiple XSS Vulnerabilities (Aug 2012) - Linux
phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
phpMyAdmin Input Validation Vulnerability
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security vulnerability exists in version 4.6.x of...
Path Information Disclosure
phpMyAdmin is vulnerable to path information disclosure. When a configuration file is missing, showconfigerrors.php does not prevent disclosing the installation path through an error message about the missing file upon the direct request of the attackers...
phpMyAdmin Elevation of Privilege Vulnerability
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. An elevation of privilege vulnerability exists in phpMyAdmin. An attacker can exploit this vulnerability to connect to an arbitrary MySQL server...
phpMyAdmin Denial of Service Vulnerability (CNVD-2017-24408)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A denial of service vulnerability exists in the table editing feature in phpMyAdmin. An attacker can exploit this vulnerability to cause a denial of service with the help of specially crafted paramete...
phpMyAdmin CSS Injection Vulnerability
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A CSS injection vulnerability exists in phpMyAdmin. The vulnerability can be exploited to inject CSS with the help of a specially crafted cookie parameter...
phpMyAdmin Denial of Service Vulnerability (CNVD-2017-24410)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A security vulnerability exists in the replication status in phpMyAdmin. An attacker can exploit this vulnerability to cause a denial of service by using a specially crafted form name...
phpMyAdmin Open Redirect Vulnerability (CNVD-2017-24407)
phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. An open redirection vulnerability exists in phpMyAdmin. An attacker can exploit this vulnerability to redirect users to untrusted websites...
CVE-2017-1000015
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...
CVE-2017-1000018
phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name...
DEBIAN-CVE-2017-1000017
phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server...
CVE-2017-1000015
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...
CVE-2017-1000017
phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server...
CVE-2017-1000018
phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name...
CVE-2017-1000013
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness...
CVE-2017-1000014
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality...
DEBIAN-CVE-2017-1000015
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...