Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201701-32
HistoryJan 11, 2017 - 12:00 a.m.

phpMyAdmin: Multiple vulnerabilities

2017-01-1100:00:00
Gentoo Foundation
security.gentoo.org
73

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.919 High

EPSS

Percentile

98.9%

JSON

Background

phpMyAdmin is a web-based management tool for MySQL databases.

Description

Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details.

Impact

A authenticated remote attacker could exploit these vulnerabilities to execute arbitrary PHP Code, inject SQL code, or to conduct Cross-Site Scripting attacks.

In certain configurations, an unauthenticated remote attacker could cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All phpMyAdmin users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.6.5.1"
OSVersionArchitecturePackageVersionFilename
Gentooanyalldev-db/phpmyadmin< 4.6.5.1UNKNOWN

Related

nessus 22
mageia 3
openvas 32
freebsd 4
suse 1
debian 6
osv 15
fedora 6
archlinux 1
phpmyadmin 10
prion 16
cve 14
nvd 15
alpinelinux 13
cvelist 12
ubuntucve 12
debiancve 12
github 5
nessus
nessus
GLSA-201701-32 : phpMyAdmin: Multiple vulnerabilities
2017-01-12 00:00:00
FreeBSD : phpmyadmin -- multiple vulnerabilities (ef70b201-645d-11e6-9cdc-6805ca0b3d42)
2016-08-18 00:00:00
phpMyAdmin 4.0.x < 4.0.10.18 / 4.4.x < 4.4.15.9 / 4.6.x < 4.6.5 Multiple Vulnerabilities
2020-12-07 00:00:00
mageia
mageia
Updated phpmyadmin packages fix security vulnerability
2016-08-31 18:32:33
Updated phpmyadmin packages fix security vulnerability
2016-12-09 11:42:46
Updated phpmyadmin packages fix security vulnerability
2016-07-05 18:47:08
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0291)
2022-01-28 00:00:00
phpMyAdmin Multiple Security Vulnerabilities - 02 (Dec 2016) - Windows
2017-04-10 00:00:00
openSUSE: Security Advisory for phpMyAdmin (openSUSE-SU-2016:2168-1)
2016-08-30 00:00:00
freebsd
freebsd
phpmyadmin -- multiple vulnerabilities
2016-08-17 00:00:00
phpMyAdmin -- multiple vulnerabilities
2016-06-23 00:00:00
phpMyAdmin -- multiple vulnerabilities
2016-11-25 00:00:00
suse
suse
Security update for phpMyAdmin (important)
2016-08-29 11:09:35
debian
debian
[SECURITY] [DLA 1821-1] phpmyadmin security update
2019-06-17 20:41:59
[SECURITY] [DLA 626-1] phpmyadmin security update
2016-09-17 21:19:36
[SECURITY] [DLA 757-1] phpmyadmin security update
2016-12-24 22:29:29
osv
osv
phpmyadmin - security update
2019-06-16 00:00:00
phpmyadmin - security update
2016-09-17 00:00:00
phpmyadmin - security update
2016-12-24 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: phpMyAdmin-4.6.3-1.fc23
2016-07-03 10:57:02
[SECURITY] Fedora 22 Update: phpMyAdmin-4.6.3-1.fc22
2016-07-03 10:52:54
[SECURITY] Fedora 24 Update: phpMyAdmin-4.6.3-1.fc24
2016-06-27 18:41:58
archlinux
archlinux
phpmyadmin: multiple issues
2016-06-25 00:00:00
phpmyadmin
phpmyadmin
Multiple full path disclosure vulnerabilities
2016-11-25 00:00:00
Multiple DOS vulnerabilities
2016-11-25 00:00:00
Multiple XSS vulnerabilities
2016-11-25 00:00:00
prion
prion
Design/Logic Flaw
2017-05-07 08:29:00
Design/Logic Flaw
2017-05-07 08:29:00
Design/Logic Flaw
2017-05-07 08:29:00
cve
cve
CVE-2016-1000365
2022-10-03 16:16:34
CVE-2016-1000367
2022-10-03 16:16:34
CVE-2016-1000366
2022-10-03 16:16:33
nvd
nvd
CVE-2016-1000365
2017-05-07 08:29:00
CVE-2016-1000367
2017-05-07 08:29:00
CVE-2016-1000366
2017-05-07 08:29:00
alpinelinux
alpinelinux
CVE-2016-9859
2016-12-11 02:59:59
CVE-2016-9861
2016-12-11 03:00:01
CVE-2016-9863
2016-12-11 03:00:04
cvelist
cvelist
CVE-2016-9860
2016-12-11 02:00:00
CVE-2016-9863
2016-12-11 02:00:00
CVE-2016-9866
2016-12-11 02:00:00
ubuntucve
ubuntucve
CVE-2016-9860
2016-12-11 00:00:00
CVE-2016-9863
2016-12-11 00:00:00
CVE-2016-9855
2016-12-11 00:00:00
debiancve
debiancve
CVE-2016-9860
2016-12-11 03:00:00
CVE-2016-9864
2016-12-11 03:00:06
CVE-2016-6615
2016-12-11 02:59:22
github
github
phpMyAdmin Denial of Service (DoS)
2022-05-17 02:36:37
phpMyAdmin DoS Vulnerability
2022-05-17 02:36:36
phpMyAdmin CSRF Vulnerability
2022-05-17 02:36:23

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.919 High

EPSS

Percentile

98.9%

JSON
Related for GLSA-201701-32
nessus22mageia3openvas32freebsd4suse1debian6osv15fedora6archlinux1phpmyadmin10prion16cve14nvd15alpinelinux13cvelist12ubuntucve12debiancve12github5