Описание
phpMyAdmin Cookie attribute injection attack
A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.
Пакеты
Наименование
phpmyadmin/phpmyadmin
composer
Затронутые версииВерсия исправления
>= 4.6, < 4.6.6
4.6.6
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 9 лет назад
A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.
CVSS3: 7.5
nvd
больше 9 лет назад
A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.
CVSS3: 7.5
debian
больше 9 лет назад
A weakness was discovered where an attacker can inject arbitrary value ...
CVSS3: 7.5
altlinux
больше 9 лет назад
ALT-PU-2017-1242: package `phpMyAdmin` update to version 4.6.6-alt1