CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2561

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) normalization.php or (2) js/normalization.js in the database normalization page, (3) templates/database/structure/sortable_header.phtml in the database structure page, or (4) the pos parameter to db_central_columns.php in the central columns page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 55.9%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2016-2561

Phpmyadmin » Phpmyadmin » Version: 4.4.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0
Phpmyadmin » Phpmyadmin » Version: 4.4.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1
Phpmyadmin » Phpmyadmin » Version: 4.4.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1
Phpmyadmin » Phpmyadmin » Version: 4.4.10

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10
Phpmyadmin » Phpmyadmin » Version: 4.4.11

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11
Phpmyadmin » Phpmyadmin » Version: 4.4.12

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12
Phpmyadmin » Phpmyadmin » Version: 4.4.13

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13
Phpmyadmin » Phpmyadmin » Version: 4.4.13.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1
Phpmyadmin » Phpmyadmin » Version: 4.4.14

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14
Phpmyadmin » Phpmyadmin » Version: 4.4.14.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1
Phpmyadmin » Phpmyadmin » Version: 4.4.15

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15
Phpmyadmin » Phpmyadmin » Version: 4.4.15.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1
Phpmyadmin » Phpmyadmin » Version: 4.4.15.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2
Phpmyadmin » Phpmyadmin » Version: 4.4.15.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3
Phpmyadmin » Phpmyadmin » Version: 4.4.15.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4
Phpmyadmin » Phpmyadmin » Version: 4.4.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2
Phpmyadmin » Phpmyadmin » Version: 4.4.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3
Phpmyadmin » Phpmyadmin » Version: 4.4.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4
Phpmyadmin » Phpmyadmin » Version: 4.4.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5
Phpmyadmin » Phpmyadmin » Version: 4.4.6

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6
Phpmyadmin » Phpmyadmin » Version: 4.4.6.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1
Phpmyadmin » Phpmyadmin » Version: 4.4.7

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7
Phpmyadmin » Phpmyadmin » Version: 4.4.8

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8
Phpmyadmin » Phpmyadmin » Version: 4.4.9

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9
Phpmyadmin » Phpmyadmin » Version: 4.5.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0
Phpmyadmin » Phpmyadmin » Version: 4.5.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.1
Phpmyadmin » Phpmyadmin » Version: 4.5.0.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.0.2
Phpmyadmin » Phpmyadmin » Version: 4.5.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.1
Phpmyadmin » Phpmyadmin » Version: 4.5.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.2
Phpmyadmin » Phpmyadmin » Version: 4.5.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3
Phpmyadmin » Phpmyadmin » Version: 4.5.3.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.3.1
Phpmyadmin » Phpmyadmin » Version: 4.5.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4
Phpmyadmin » Phpmyadmin » Version: 4.5.4.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.4.1
Phpmyadmin » Phpmyadmin » Version: 4.5.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.5.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2561

Products

Pricing

Contact Us