6.1
CVSSv3

CVE-2016-5731

Published: 03/07/2016 Updated: 30/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x prior to 4.0.10.16, 4.4.x prior to 4.4.15.7, and 4.6.x prior to 4.6.3 allows remote malicious users to inject arbitrary web script or HTML via vectors involving an OpenID error message.

Vulnerable Product Search on Vulmon Subscribe to Product

phpmyadmin phpmyadmin 4.6.0

phpmyadmin phpmyadmin 4.6.2

phpmyadmin phpmyadmin 4.6.1

phpmyadmin phpmyadmin 4.0.10.15

phpmyadmin phpmyadmin 4.0.9

phpmyadmin phpmyadmin 4.0.4

phpmyadmin phpmyadmin 4.0.3

phpmyadmin phpmyadmin 4.0.10.4

phpmyadmin phpmyadmin 4.0.10.3

phpmyadmin phpmyadmin 4.0.10

phpmyadmin phpmyadmin 4.0.1

phpmyadmin phpmyadmin 4.0.6

phpmyadmin phpmyadmin 4.0.5

phpmyadmin phpmyadmin 4.0.10.8

phpmyadmin phpmyadmin 4.0.10.7

phpmyadmin phpmyadmin 4.0.10.13

phpmyadmin phpmyadmin 4.0.10.12

phpmyadmin phpmyadmin 4.0.4.2

phpmyadmin phpmyadmin 4.0.4.1

phpmyadmin phpmyadmin 4.0.10.6

phpmyadmin phpmyadmin 4.0.10.5

phpmyadmin phpmyadmin 4.0.10.11

phpmyadmin phpmyadmin 4.0.10.10

phpmyadmin phpmyadmin 4.0.10.1

phpmyadmin phpmyadmin 4.0.8

phpmyadmin phpmyadmin 4.0.7

phpmyadmin phpmyadmin 4.0.2

phpmyadmin phpmyadmin 4.0.10.9

phpmyadmin phpmyadmin 4.0.10.2

phpmyadmin phpmyadmin 4.0.10.14

phpmyadmin phpmyadmin 4.0.0

phpmyadmin phpmyadmin 4.4.7

phpmyadmin phpmyadmin 4.4.6.1

phpmyadmin phpmyadmin 4.4.15.3

phpmyadmin phpmyadmin 4.4.15.2

phpmyadmin phpmyadmin 4.4.10

phpmyadmin phpmyadmin 4.4.1.1

phpmyadmin phpmyadmin 4.4.15.6

phpmyadmin phpmyadmin 4.4.15.5

phpmyadmin phpmyadmin 4.4.4

phpmyadmin phpmyadmin 4.4.3

phpmyadmin phpmyadmin 4.4.14.1

phpmyadmin phpmyadmin 4.4.13.1

phpmyadmin phpmyadmin 4.4.13

phpmyadmin phpmyadmin 4.4.9

phpmyadmin phpmyadmin 4.4.8

phpmyadmin phpmyadmin 4.4.2

phpmyadmin phpmyadmin 4.4.15.4

phpmyadmin phpmyadmin 4.4.12

phpmyadmin phpmyadmin 4.4.11

phpmyadmin phpmyadmin 4.4.6

phpmyadmin phpmyadmin 4.4.5

phpmyadmin phpmyadmin 4.4.15.1

phpmyadmin phpmyadmin 4.4.15

phpmyadmin phpmyadmin 4.4.1

phpmyadmin phpmyadmin 4.4.0

opensuse opensuse 13.2

opensuse opensuse 13.1

opensuse leap 42.1

Vendor Advisories

Several vulnerabilities have been fixed in phpMyAdmin, the web-based MySQL administration interface CVE-2016-1927 The suggestPassword function relied on a non-secure random number generator which makes it easier for remote attackers to guess generated passwords via a brute-force approach CVE-2016-2039 CSRF token values were gener ...