CVE-2018-15605

Опубликовано: 24 авг. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature.

Ссылки

http://www.securityfocus.com/bid/105168
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041548
Third Party Advisory
VDB Entry
https://github.com/phpmyadmin/phpmyadmin/commit/00d90b3ae415b31338f76263359467a9fbebd0a1
Patch
Third Party Advisory
https://www.phpmyadmin.net/security/PMASA-2018-5/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105168
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041548
Third Party Advisory
VDB Entry
https://github.com/phpmyadmin/phpmyadmin/commit/00d90b3ae415b31338f76263359467a9fbebd0a1
Patch
Third Party Advisory
https://www.phpmyadmin.net/security/PMASA-2018-5/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*

Версия до 4.8.3 (исключая)

EPSS

Процентиль: 71%

0.00675

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-15605

CVSS3: 6.1

ubuntu

больше 7 лет назад

CVE-2018-15605

CVSS3: 6.1

debian

больше 7 лет назад

An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scrip ...

openSUSE-SU-2018:2525-2

suse-cvrf

больше 7 лет назад

Security update for phpMyAdmin

openSUSE-SU-2018:2525-1

suse-cvrf

больше 7 лет назад

Security update for phpMyAdmin

openSUSE-SU-2018:2523-1

suse-cvrf

больше 7 лет назад

Security update for phpMyAdmin

EPSS

Процентиль: 71%

0.00675

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79