Phpmyadmin: >> Phpmyadmin >> 4.4.15.9 Security Vulnerabilities
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
CVSS Score
7.5
EPSS Score
0.011
Published
2017-07-17
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
CVSS Score
6.1
EPSS Score
0.006
Published
2017-07-17
phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server
CVSS Score
8.8
EPSS Score
0.008
Published
2017-07-17
phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name
CVSS Score
7.5
EPSS Score
0.01
Published
2017-07-17
The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
CVSS Score
8.6
EPSS Score
0.003
Published
2017-01-31
phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote attackers to obtain sensitive information by reading (1) HTTP requests or (2) server logs.
CVSS Score
5.3
EPSS Score
0.006
Published
2016-07-05
Page 3