CVE-2016-6608

Опубликовано: 11 дек. 2016

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.

Ссылки

http://www.securityfocus.com/bid/93258
https://security.gentoo.org/glsa/201701-32
https://www.phpmyadmin.net/security/PMASA-2016-31
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93258
https://security.gentoo.org/glsa/201701-32
https://www.phpmyadmin.net/security/PMASA-2016-31
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.0128

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2016-6608

CVSS3: 6.1

ubuntu

почти 10 лет назад

CVE-2016-6608

CVSS3: 6.1

debian

почти 10 лет назад

XSS issues were discovered in phpMyAdmin. This affects the database pr ...

GHSA-jfmj-27fp-qp67

CVSS3: 6.1

github

больше 4 лет назад

phpMyAdmin Cross-site Scripting (XSS)

openSUSE-SU-2016:2168-1

suse-cvrf

около 10 лет назад

Security update for phpMyAdmin

EPSS

Процентиль: 69%

0.0128

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79