Логотип exploitDog
product: "phpmyadmin"
Консоль
Логотип exploitDog

exploitDog

product: "phpmyadmin"

Количество 1 093

Количество 1 093

debian логотип

CVE-2013-5000

около 12 лет назад

phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sens ...

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2013-4999

около 12 лет назад

phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php.

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2013-4999

около 12 лет назад

phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2013-4999

около 12 лет назад

phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sens ...

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2013-4998

около 12 лет назад

phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmd_common.php and other files.

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2013-4998

около 12 лет назад

phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmd_common.php and other files.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2013-4998

около 12 лет назад

phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote ...

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2013-4997

около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2013-4997

около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2013-4997

около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5. ...

CVSS2: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2013-4996

около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo URL in the navigation panel, (4) a crafted entry in a certain proxy list, or (5) crafted content in a version.json file.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2013-4996

около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo URL in the navigation panel, (4) a crafted entry in a certain proxy list, or (5) crafted content in a version.json file.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2013-4996

около 12 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5. ...

CVSS2: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2013-4995

около 12 лет назад

Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query that is not properly handled during the display of row information.

CVSS2: 3.5
EPSS: Низкий
nvd логотип

CVE-2013-4995

около 12 лет назад

Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query that is not properly handled during the display of row information.

CVSS2: 3.5
EPSS: Низкий
debian логотип

CVE-2013-4995

около 12 лет назад

Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3. ...

CVSS2: 3.5
EPSS: Низкий
ubuntu логотип

CVE-2013-4729

около 12 лет назад

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request.

CVSS2: 5.5
EPSS: Низкий
nvd логотип

CVE-2013-4729

около 12 лет назад

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request.

CVSS2: 5.5
EPSS: Низкий
debian логотип

CVE-2013-4729

около 12 лет назад

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict ...

CVSS2: 5.5
EPSS: Низкий
ubuntu логотип

CVE-2013-3742

около 12 лет назад

Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via an invalid SQL CREATE VIEW statement with a crafted name that triggers an error message.

CVSS2: 3.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
debian логотип
CVE-2013-5000

phpMyAdmin 3.5.x before 3.5.8.2 allows remote attackers to obtain sens ...

CVSS2: 5
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4999

phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php.

CVSS2: 5
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-4999

phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to Error.class.php and Error_Handler.class.php.

CVSS2: 5
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4999

phpMyAdmin 4.0.x before 4.0.4.2 allows remote attackers to obtain sens ...

CVSS2: 5
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4998

phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmd_common.php and other files.

CVSS2: 5
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-4998

phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the installation path in an error message, related to pmd_common.php and other files.

CVSS2: 5
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4998

phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote ...

CVSS2: 5
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4997

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.

CVSS2: 4.3
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-4997

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.

CVSS2: 4.3
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4997

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5. ...

CVSS2: 4.3
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4996

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo URL in the navigation panel, (4) a crafted entry in a certain proxy list, or (5) crafted content in a version.json file.

CVSS2: 4.3
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-4996

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a crafted database name, (2) a crafted user name, (3) a crafted logo URL in the navigation panel, (4) a crafted entry in a certain proxy list, or (5) crafted content in a version.json file.

CVSS2: 4.3
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4996

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5. ...

CVSS2: 4.3
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4995

Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query that is not properly handled during the display of row information.

CVSS2: 3.5
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-4995

Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SQL query that is not properly handled during the display of row information.

CVSS2: 3.5
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4995

Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x before 3. ...

CVSS2: 3.5
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4729

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request.

CVSS2: 5.5
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-4729

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request.

CVSS2: 5.5
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4729

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict ...

CVSS2: 5.5
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-3742

Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via an invalid SQL CREATE VIEW statement with a crafted name that triggers an error message.

CVSS2: 3.5
0%
Низкий
около 12 лет назад

Уязвимостей на страницу