phpmyadmin phpmyadmin 4.5.0.1 vulnerabilities and exploits

(subscribe to this query)

libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x prior to 4.5.4 allows remote malicious users to obtain sensitive information via a crafted request, which reveals the full path in an error message.

Fedoraproject Fedora 23 Fedoraproject Fedora 22 Phpmyadmin Phpmyadmin 4.5.2 Phpmyadmin Phpmyadmin 4.5.0.2 Phpmyadmin Phpmyadmin 4.5.0.1 Phpmyadmin Phpmyadmin 4.5.0 Phpmyadmin Phpmyadmin 4.5.3 Phpmyadmin Phpmyadmin 4.5.1

Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x prior to 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON data in a response.

Phpmyadmin Phpmyadmin 4.5.0.2 Phpmyadmin Phpmyadmin 4.5.0 Phpmyadmin Phpmyadmin 4.5.3 Phpmyadmin Phpmyadmin 4.5.2 Phpmyadmin Phpmyadmin 4.5.1 Phpmyadmin Phpmyadmin 4.5.0.1 Fedoraproject Fedora 22 Fedoraproject Fedora 23

Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x prior to 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.

Phpmyadmin Phpmyadmin 4.5.0 Phpmyadmin Phpmyadmin 4.5.3.1 Phpmyadmin Phpmyadmin 4.5.0.1 Phpmyadmin Phpmyadmin 4.5.5 Phpmyadmin Phpmyadmin 4.5.3 Phpmyadmin Phpmyadmin 4.5.2 Phpmyadmin Phpmyadmin 4.5.4.1 Phpmyadmin Phpmyadmin 4.5.4 Phpmyadmin Phpmyadmin 4.5.1 Phpmyadmin Phpmyadmin 4.5.0.2

The checkHTTP function in libraries/Config.class.php in phpMyAdmin 4.5.x prior to 4.5.5.1 does not verify X.509 certificates from api.github.com SSL servers, which allows man-in-the-middle malicious users to spoof these servers and obtain sensitive information via a crafted certi...

Phpmyadmin Phpmyadmin 4.5.2 Phpmyadmin Phpmyadmin 4.5.1 Phpmyadmin Phpmyadmin 4.5.4.1 Phpmyadmin Phpmyadmin 4.5.4 Phpmyadmin Phpmyadmin 4.5.0 Phpmyadmin Phpmyadmin 4.5.5 Phpmyadmin Phpmyadmin 4.5.0.2 Phpmyadmin Phpmyadmin 4.5.0.1 Phpmyadmin Phpmyadmin 4.5.3.1 Phpmyadmin Phpmyadmin 4.5.3

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x prior to 4.4.15.5 and 4.5.x prior to 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) normalization.php or (2) js/normalization.js in the database normalization page, (3...

phpMyAdmin 4.4.x prior to 4.4.15.3 and 4.5.x prior to 4.5.4 allows remote malicious users to obtain sensitive information via a crafted request to (1) libraries/phpseclib/Crypt/AES.php or (2) libraries/phpseclib/Crypt/Rijndael.php, which reveals the full path in an error message.

Cross-site scripting (XSS) vulnerability in the goToFinish1NF function in js/normalization.js in phpMyAdmin 4.4.x prior to 4.4.15.3 and 4.5.x prior to 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a table name to the normalization page.

The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x prior to 4.0.10.13, 4.4.x prior to 4.4.15.3, and 4.5.x prior to 4.5.4 relies on the Math.random JavaScript function, which makes it easier for remote malicious users to guess passwords via a brute-force approach.

libraries/config/messages.inc.php in phpMyAdmin 4.0.x prior to 4.0.10.12, 4.4.x prior to 4.4.15.2, and 4.5.x prior to 4.5.3.1 allows remote malicious users to obtain sensitive information via a crafted request, which reveals the full path in an error message.

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook