Описание
phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.
Ссылки
- ExploitPatchThird Party Advisory
- Third Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- PatchVendor Advisory
- ExploitPatchThird Party Advisory
- Third Party AdvisoryVDB Entry
- ExploitThird Party AdvisoryVDB Entry
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.7.0 (включая) до 4.7.7 (исключая)
cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.08464
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 8.8
ubuntu
почти 9 лет назад
phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.
CVSS3: 8.8
debian
почти 9 лет назад
phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a ...
CVSS3: 8.8
altlinux
почти 9 лет назад
ALT-PU-2018-1087: package `phpMyAdmin` update to version 4.7.7-alt1
EPSS
Процентиль: 95%
0.08464
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-352