Lucene search
K

6026 matches found

RedhatCVE
RedhatCVE
added 2015/10/30 10:4 a.m.17 views

CVE-2013-3240

Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a parameter that specifies a crafted export type...

6.5CVSS7.3AI score0.04055EPSS
Exploits5References2
Tenable Nessus
Tenable Nessus
added 2015/10/30 12:0 a.m.55 views

Debian DSA-3382-1 : phpmyadmin - security update

Several issues have been fixed in phpMyAdmin, the web administration tool for MySQL. - CVE-2014-8958 Wheezy only Multiple cross-site scripting XSS vulnerabilities. - CVE-2014-9218 Wheezy only Denial of service resource consumption via a long password. - CVE-2015-2206 Risk of BREACH attack due to...

6.8CVSS7.8AI score0.21219EPSS
Exploits7References18
ArchLinux
ArchLinux
added 2015/10/30 12:0 a.m.48 views

phpmyadmin: content spoofing

This vulnerability allows an attacker to perform a content spoofing attack using the phpMyAdmin's redirection mechanism to external sites. This vulnerability is not considered to be critical since the spoofed content is escaped and no HTML injection is possible...

5CVSS1.3AI score0.00625EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2015/10/29 12:0 a.m.58 views

Debian DLA-336-1 : phpmyadmin security update

Several issues have been fixed in phpMyAdmin, the web administration tool for MySQL. CVE-2014-8958 Multiple cross-site scripting XSS vulnerabilities. CVE-2014-9218 Denial of service resource consumption via a long password. CVE-2015-2206 Risk of BREACH attack due to reflected parameter...

6.8CVSS7.8AI score0.15266EPSS
Exploits4References6
CNVD
CNVD
added 2015/10/29 12:0 a.m.0 views

phpMyAdmin redirection function content spoofing vulnerability

phpmyadmin is an online management tool for MySQL databases. A security vulnerability exists in the redirection function of url.php in phpMyAdmin versions 4.4.x-4.4.15.1, 4.5.x-4.5.1. A remote attacker can perform content spoofing via the url parameter...

5CVSS9.5AI score0.00625EPSS
Exploits0References1
Debian
Debian
added 2015/10/28 7:55 p.m.41 views

[SECURITY] [DLA 336-1] phpmyadmin security update

Package : phpmyadmin Version : 4:3.3.7-9 CVE ID : CVE-2014-8958 CVE-2014-9218 CVE-2015-2206 CVE-2015-3902 Several issues have been fixed in phpMyAdmin, the web administration tool for MySQL. CVE-2014-8958 Multiple cross-site scripting XSS vulnerabilities. CVE-2014-9218 Denial of service resource...

6.8CVSS9.2AI score0.15266EPSS
Exploits4
Debian
Debian
added 2015/10/28 7:52 p.m.34 views

[SECURITY] [DSA 3382-1] phpmyadmin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3382-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst October 28, 2015 https://www.debian.org/security/faq -...

6.8CVSS9.6AI score0.21219EPSS
Exploits7
NVD
NVD
added 2015/10/28 10:59 a.m.16 views

CVE-2015-7873

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...

5CVSS6.3AI score0.00625EPSS
Exploits0References8
OSV
OSV
added 2015/10/28 10:59 a.m.8 views

CVE-2015-7873

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...

6.3AI score
Exploits0References9
OSV
OSV
added 2015/10/28 10:59 a.m.3 views

DEBIAN-CVE-2015-7873

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...

5CVSS9.4AI score0.00625EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2015/10/28 10:59 a.m.30 views

CVE-2015-7873

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...

5CVSS7.2AI score0.00625EPSS
Exploits0References2
Prion
Prion
added 2015/10/28 10:59 a.m.19 views

Authentication flaw

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...

5CVSS6.9AI score0.00625EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2015/10/28 10:59 a.m.2 views

UBUNTU-CVE-2015-7873

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...

5CVSS7.3AI score0.00625EPSS
Exploits0References3
Cvelist
Cvelist
added 2015/10/28 10:0 a.m.17 views

CVE-2015-7873

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...

6.2AI score0.00625EPSS
Exploits0References8
CVE
CVE
added 2015/10/28 10:0 a.m.73 views

CVE-2015-7873

CVE-2015-7873 affects phpMyAdmin's redirect feature in url.php, enabling content spoofing via the url parameter in affected 4.4.x and 4.5.x branches. Root cause: the url.php redirect logic allows an attacker to steer victims to an external or spoofed page, potentially misleading users. Affected v...

5CVSS6.3AI score0.00625EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2015/10/28 10:0 a.m.26 views

CVE-2015-7873

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...

5CVSS6.3AI score0.00625EPSS
Exploits0
OpenVAS
OpenVAS
added 2015/10/28 12:0 a.m.45 views

Debian Security Advisory DSA 3382-1 (phpmyadmin - security update)

Several issues have been fixed in phpMyAdmin, the web administration tool for MySQL. CVE-2014-8958 Wheezy only Multiple cross-site scripting XSS vulnerabilities. CVE-2014-9218 Wheezy only Denial of service resource consumption via a long password. CVE-2015-2206 Risk of BREACH attack due to...

6.8CVSS8AI score0.21219EPSS
Exploits7References1
OSV
OSV
added 2015/10/28 12:0 a.m.37 views

DLA-336-1 phpmyadmin - security update

Bulletin has no description...

6.8CVSS8AI score0.15266EPSS
Exploits4
OSV
OSV
added 2015/10/28 12:0 a.m.39 views

DSA-3382-1 phpmyadmin - security update

Bulletin has no description...

6.8CVSS8.1AI score0.21219EPSS
Exploits7
OpenVAS
OpenVAS
added 2015/10/27 12:0 a.m.37 views

Debian: Security Advisory (DSA-3382-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS9.8AI score0.21219EPSS
Exploits7References3
Rows per page
Query Builder