CVE-2017-1000017: Server-Side Request Forgery (SSRF)

phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server...

CVE-2017-1000015: Improper Neutralization of Input During Web Page Generation

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

CVE-2017-1000018: Improper Input Validation

phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name...

CVE-2017-1000013: URL Redirection to Untrusted Site

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness...

CVE-2017-1000015

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

CVE-2017-1000018

phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name...

CVE-2017-1000018

CVE-2017-1000018 affects phpMyAdmin 4.0, 4.4, and 4.6. The vulnerability allows a denial-of-service in the replication status by sending a specially crafted table name. The provided sources consistently describe a DOS impact without detailing exploitation steps beyond the specific input vector. T...

CVE-2017-1000017

phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server...

CVE-2017-1000015

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters...

CVE-2017-1000018

phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name...

CVE-2017-1000014

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality...

CVE-2017-1000017

CVE-2017-1000017 affects phpMyAdmin 4.0, 4.4 and 4.6. A user with appropriate permissions can connect to an arbitrary MySQL server, indicating a serious exposure for affected deployments. The entry includes CVSS details (v3: 8.8, HIGH) from NVD, with network attack vector and no user interaction ...

CVE-2017-1000014

CVE-2017-1000014 affects phpMyAdmin up to v4.6, where the table-editing input handling is vulnerable to a denial of service. The root cause, per the Ubuntu USN entry, is improper sanitization of input during the table editing operation, which could trigger a recursive condition and exhaust resour...

CVE-2017-1000013

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness...

CVE-2017-1000013

CVE-2017-1000013 affects phpMyAdmin 4.0, 4.4, and 4.6, which are vulnerable to an open redirect weakness. The available documents confirm the vulnerable product versions and the nature of the flaw (open redirect). No detailed root-cause, affected files, or concrete exploitation steps are provided...

CVE-2017-1000013

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness...

CVE-2017-1000015

CVE-2017-1000015 : phpMyAdmin versions 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack via crafted cookie parameters. The connected documents confirm the affected software and the underlying issue is a CSS injection triggered by cookie values; no exploit details or in‑the‑wild data are...

CVE-2017-1000014

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality...

CVE-2017-1000017

phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server...

CVE-2017-1000013

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness...