CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2560

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Host HTTP header, related to libraries/Config.class.php; (2) crafted JSON data, related to file_echo.php; (3) a crafted SQL query, related to js/functions.js; (4) the initial parameter to libraries/server_privileges.lib.php in the user accounts page; or (5) the it parameter to libraries/controllers/TableSearchController.class.php in the zoom search page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 78.9%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2016-2560

Phpmyadmin » Phpmyadmin » Version: 4.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0
Phpmyadmin » Phpmyadmin » Version: 4.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1
Phpmyadmin » Phpmyadmin » Version: 4.0.10

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10
Phpmyadmin » Phpmyadmin » Version: 4.0.10.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1
Phpmyadmin » Phpmyadmin » Version: 4.0.10.10

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10
Phpmyadmin » Phpmyadmin » Version: 4.0.10.11

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11
Phpmyadmin » Phpmyadmin » Version: 4.0.10.12

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12
Phpmyadmin » Phpmyadmin » Version: 4.0.10.13

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13
Phpmyadmin » Phpmyadmin » Version: 4.0.10.14

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14
Phpmyadmin » Phpmyadmin » Version: 4.0.10.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2
Phpmyadmin » Phpmyadmin » Version: 4.0.10.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3
Phpmyadmin » Phpmyadmin » Version: 4.0.10.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4
Phpmyadmin » Phpmyadmin » Version: 4.0.10.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5
Phpmyadmin » Phpmyadmin » Version: 4.0.10.6

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6
Phpmyadmin » Phpmyadmin » Version: 4.0.10.7

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7
Phpmyadmin » Phpmyadmin » Version: 4.0.10.8

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8
Phpmyadmin » Phpmyadmin » Version: 4.0.10.9

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9
Phpmyadmin » Phpmyadmin » Version: 4.0.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2
Phpmyadmin » Phpmyadmin » Version: 4.0.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3
Phpmyadmin » Phpmyadmin » Version: 4.0.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4
Phpmyadmin » Phpmyadmin » Version: 4.0.4.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1
Phpmyadmin » Phpmyadmin » Version: 4.0.4.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2
Phpmyadmin » Phpmyadmin » Version: 4.0.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5
Phpmyadmin » Phpmyadmin » Version: 4.0.6

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6
Phpmyadmin » Phpmyadmin » Version: 4.0.7

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7
Phpmyadmin » Phpmyadmin » Version: 4.0.8

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8
Phpmyadmin » Phpmyadmin » Version: 4.0.9

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9
Phpmyadmin » Phpmyadmin » Version: 4.4.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0
Phpmyadmin » Phpmyadmin » Version: 4.4.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1
Phpmyadmin » Phpmyadmin » Version: 4.4.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1
Phpmyadmin » Phpmyadmin » Version: 4.4.10

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10
Phpmyadmin » Phpmyadmin » Version: 4.4.11

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11
Phpmyadmin » Phpmyadmin » Version: 4.4.12

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12
Phpmyadmin » Phpmyadmin » Version: 4.4.13

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13
Phpmyadmin » Phpmyadmin » Version: 4.4.13.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1
Phpmyadmin » Phpmyadmin » Version: 4.4.14

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14
Phpmyadmin » Phpmyadmin » Version: 4.4.14.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1
Phpmyadmin » Phpmyadmin » Version: 4.4.15

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15
Phpmyadmin » Phpmyadmin » Version: 4.4.15.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1
Phpmyadmin » Phpmyadmin » Version: 4.4.15.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2
Phpmyadmin » Phpmyadmin » Version: 4.4.15.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3
Phpmyadmin » Phpmyadmin » Version: 4.4.15.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4
Phpmyadmin » Phpmyadmin » Version: 4.4.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2
Phpmyadmin » Phpmyadmin » Version: 4.4.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3
Phpmyadmin » Phpmyadmin » Version: 4.4.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4
Phpmyadmin » Phpmyadmin » Version: 4.4.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5
Phpmyadmin » Phpmyadmin » Version: 4.4.6

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6
Phpmyadmin » Phpmyadmin » Version: 4.4.6.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1
Phpmyadmin » Phpmyadmin » Version: 4.4.7

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7
Phpmyadmin » Phpmyadmin » Version: 4.4.8

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8
Phpmyadmin » Phpmyadmin » Version: 4.4.9

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9
Phpmyadmin » Phpmyadmin » Version: 4.5.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0
Phpmyadmin » Phpmyadmin » Version: 4.5.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1
Phpmyadmin » Phpmyadmin » Version: 4.5.0.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2
Phpmyadmin » Phpmyadmin » Version: 4.5.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1
Phpmyadmin » Phpmyadmin » Version: 4.5.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2
Phpmyadmin » Phpmyadmin » Version: 4.5.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3
Phpmyadmin » Phpmyadmin » Version: 4.5.3.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3.1
Phpmyadmin » Phpmyadmin » Version: 4.5.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4
Phpmyadmin » Phpmyadmin » Version: 4.5.4.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4.1
Phpmyadmin » Phpmyadmin » Version: 4.5.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2560

Products

Pricing

Contact Us