Lucene search
+L

6030 matches found

GithubExploit
GithubExploit
added 2018/02/03 10:26 p.m.55 views

Exploit for Code Injection in Phpmyadmin

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php'...

9.8CVSS8.1AI score0.95438EPSS
SaveExploits17
CNVD
CNVD
added 2018/01/19 12:0 a.m.3 views

phpMyAdmin Cross-Site Request Forgery Vulnerability (CNVD-2018-04307)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A cross-site request forgery vulnerability exists in phpMyAdmin due to the program failing to properly validate HTTP requests. A remote attacker could exploit the vulnerability to perform certain...

6.8AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/01/15 12:0 a.m.15 views

Fedora 27 : phpMyAdmin (2017-cad79c7c6c)

Upstream announcement : Welcome to phpMyAdmin 4.7.7, a regular maintenance release containing bug fixes and a security fix. The security vulnerability is a XSRF/CSRF flaw; you can read more at https://www.phpmyadmin.net/security/PMASA-2017-9/ As a result of this, we recommend all users upgrade...

5.6AI score
SaveExploits0References2
Check Point Advisories
Check Point Advisories
added 2018/01/10 12:0 a.m.52 views

Web servers PHPMyAdmin Suspicious Table Hyperlink (CVE-2017-1000499)

A PhpMyAdmin user could be subject to a phishing attack. This is due to the way PhpMyAdmin handles modify requests. A successful attack could lead to malicious SQL command execution...

6.8CVSS3.2AI score0.08464EPSS
SaveExploits5
OpenVAS
OpenVAS
added 2018/01/07 12:0 a.m.31 views

Debian: Security Advisory (DLA-834-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8AI score0.01927EPSS
SaveExploits0References3
CNVD
CNVD
added 2018/01/05 12:0 a.m.5 views

phpMyAdmin Cross-Site Request Forgery Vulnerability (CNVD-2018-03075)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site request forgery vulnerability exists in...

8.8CVSS7.4AI score0.08464EPSS
SaveExploits5References1
OpenVAS
OpenVAS
added 2018/01/05 12:0 a.m.12 views

Fedora Update for phpMyAdmin FEDORA-2017-cad79c7c6c

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/01/05 12:0 a.m.19 views

Fedora Update for phpMyAdmin FEDORA-2017-481515e199

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Prion
Prion
added 2018/01/03 2:29 p.m.18 views

Cross site request forgery (csrf)

phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

6.8CVSS8.4AI score0.08464EPSS
SaveExploits5References4Affected Software1
NVD
NVD
added 2018/01/03 2:29 p.m.18 views

CVE-2017-1000499

phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

8.8CVSS8.6AI score0.08464EPSS
SaveExploits5References4
UbuntuCve
UbuntuCve
added 2018/01/03 2:29 p.m.25 views

CVE-2017-1000499

phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

8.8CVSS7.2AI score0.08464EPSS
SaveExploits5References2
OSV
OSV
added 2018/01/03 2:29 p.m.20 views

CVE-2017-1000499

phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

8.8CVSS8.8AI score
SaveExploits0References4
CVE
CVE
added 2018/01/03 2:0 p.m.87 views

CVE-2017-1000499

CVE-2017-1000499 affects phpMyAdmin 4.7.x prior to 4.7.7 (and 4.7.6.1) with a CSRF weakness that allows an attacker to trick a logged-in admin into performing destructive DB operations (e.g., DELETE/DROP). The issue is caused by insufficient CSRF protections in phpMyAdmin’s request handling, enab...

8.8CVSS8.3AI score0.08464EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
added 2018/01/03 2:0 p.m.40 views

CVE-2017-1000499

phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

8.5AI score0.08464EPSS
SaveExploits5References4
Debian CVE
Debian CVE
added 2018/01/03 2:0 p.m.88 views

CVE-2017-1000499

phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

8.8CVSS8.6AI score0.08464EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2018/01/03 12:0 a.m.17 views

Fedora 26 : phpMyAdmin (2017-481515e199)

Upstream announcement : Welcome to phpMyAdmin 4.7.7, a regular maintenance release containing bug fixes and a security fix. The security vulnerability is a XSRF/CSRF flaw; you can read more at https://www.phpmyadmin.net/security/PMASA-2017-9/ As a result of this, we recommend all users upgrade...

5.6AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/01/03 12:0 a.m.35 views

phpMyAdmin XSRF/CSRF Vulnerability (PMASA-2017-9) - Linux

phpMyAdmin is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS8.7AI score0.08464EPSS
SaveExploits5References1
OpenVAS
OpenVAS
added 2018/01/03 12:0 a.m.32 views

phpMyAdmin XSRF/CSRF Vulnerability (PMASA-2017-9) - Windows

phpMyAdmin is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS8.7AI score0.08464EPSS
SaveExploits5References1
Fedora
Fedora
added 2018/01/02 4:58 p.m.10 views

[SECURITY] Fedora 27 Update: phpMyAdmin-4.7.7-1.fc27

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

1.3AI score
SaveExploits0
Fedora
Fedora
added 2018/01/02 4:29 p.m.24 views

[SECURITY] Fedora 26 Update: phpMyAdmin-4.7.7-1.fc26

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

1.3AI score
SaveExploits0
Rows per page
Query Builder