CVE-2017-1000015

Опубликовано: 17 июл. 2017

Источник: debian

EPSS Низкий

Описание

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

Пакет	Статус	Версия исправления	Релиз	Тип
phpmyadmin	fixed	4:4.6.6-1		package

https://www.phpmyadmin.net/security/PMASA-2017-4
https://github.com/phpmyadmin/phpmyadmin/commit/8a0816266cc1db9e9889829f9f0d88a19650c977 (4.0-branch)
https://github.com/phpmyadmin/phpmyadmin/commit/bd3677f161977bf0cc800cae82e65355bf49f342 (4.4-branch)
https://github.com/phpmyadmin/phpmyadmin/commit/3a6247674e653507294f23480b4c0e1c532badbe (4.6-branch)

EPSS

Процентиль: 68%

0.00557

Низкий

CVE-2017-1000015

CVSS3: 6.1

ubuntu

больше 8 лет назад

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

CVE-2017-1000015

CVSS3: 6.1

nvd

больше 8 лет назад

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

GHSA-3fgq-cmr4-97rr

CVSS3: 6.1

github

больше 3 лет назад

phpMyAdmin CSS Injection Vulnerability

EPSS

Процентиль: 68%

0.00557

Низкий