CVE-2016-6608

Опубликовано: 11 дек. 2016

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.

Ссылки

http://www.securityfocus.com/bid/93258
https://security.gentoo.org/glsa/201701-32
https://www.phpmyadmin.net/security/PMASA-2016-31
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93258
https://security.gentoo.org/glsa/201701-32
https://www.phpmyadmin.net/security/PMASA-2016-31
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00452

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2016-6608

CVSS3: 6.1

ubuntu

около 9 лет назад

CVE-2016-6608

CVSS3: 6.1

debian

около 9 лет назад

XSS issues were discovered in phpMyAdmin. This affects the database pr ...

GHSA-jfmj-27fp-qp67

CVSS3: 6.1

github

больше 3 лет назад

phpMyAdmin Cross-site Scripting (XSS)

openSUSE-SU-2016:2168-1

suse-cvrf

больше 9 лет назад

Security update for phpMyAdmin

EPSS

Процентиль: 63%

0.00452

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79