Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mfr9-pcm3-6mwc

Опубликовано: 24 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

phpMyAdmin CSRF Vulnerability

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) to the victim.

Пакеты

Наименование

phpmyadmin/phpmyadmin

composer
Затронутые версииВерсия исправления

< 4.9.0

4.9.0

EPSS

Процентиль: 98%
0.62457
Средний

6.5 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 6 лет назад

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) to the victim.

CVSS3: 6.5
nvd
около 6 лет назад

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) to the victim.

CVSS3: 6.5
debian
около 6 лет назад

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability wa ...

suse-cvrf
почти 6 лет назад

Security update for phpMyAdmin

EPSS

Процентиль: 98%
0.62457
Средний

6.5 Medium

CVSS3

Дефекты

CWE-352