CVE-2016-6608

Опубликовано: 11 дек. 2016

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.

Ссылки

http://www.securityfocus.com/bid/93258
https://security.gentoo.org/glsa/201701-32
https://www.phpmyadmin.net/security/PMASA-2016-31
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93258
https://security.gentoo.org/glsa/201701-32
https://www.phpmyadmin.net/security/PMASA-2016-31
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00482

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2016-6608

CVSS3: 6.1

ubuntu

больше 8 лет назад

CVE-2016-6608

CVSS3: 6.1

debian

больше 8 лет назад

XSS issues were discovered in phpMyAdmin. This affects the database pr ...

GHSA-jfmj-27fp-qp67

CVSS3: 6.1

github

около 3 лет назад

phpMyAdmin Cross-site Scripting (XSS)

openSUSE-SU-2016:2168-1

suse-cvrf

почти 9 лет назад

Security update for phpMyAdmin

EPSS

Процентиль: 64%

0.00482

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79