CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
Confidence
High
EPSS
Percentile
61.2%
An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicious SVG file. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Vendor | Product | Version | CPE |
---|---|---|---|
phpmyadmin | phpmyadmin | 4.4.15.7 | cpe:/a:phpmyadmin:phpmyadmin:4.4.15.7::: |
phpmyadmin | phpmyadmin | 4.4.15.6 | cpe:/a:phpmyadmin:phpmyadmin:4.4.15.6::: |
phpmyadmin | phpmyadmin | 4.4.5 | cpe:/a:phpmyadmin:phpmyadmin:4.4.5::: |
phpmyadmin | phpmyadmin | 4.4.15.4 | cpe:/a:phpmyadmin:phpmyadmin:4.4.15.4::: |
phpmyadmin | phpmyadmin | 4.4.4 | cpe:/a:phpmyadmin:phpmyadmin:4.4.4::: |
phpmyadmin | phpmyadmin | 4.4.15.2 | cpe:/a:phpmyadmin:phpmyadmin:4.4.15.2::: |
phpmyadmin | phpmyadmin | 4.4.1 | cpe:/a:phpmyadmin:phpmyadmin:4.4.1::: |
phpmyadmin | phpmyadmin | 4.4.9 | cpe:/a:phpmyadmin:phpmyadmin:4.4.9::: |
phpmyadmin | phpmyadmin | 4.4.6.1 | cpe:/a:phpmyadmin:phpmyadmin:4.4.6.1::: |
phpmyadmin | phpmyadmin | 4.4.10 | cpe:/a:phpmyadmin:phpmyadmin:4.4.10::: |
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
Confidence
High
EPSS
Percentile
61.2%