Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | phpmyadmin | 4:3.4.11.1-2+deb7u6 |
Vulnerabilities 13
-
High 8.8
phpMyAdmin PHP code injection
An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10…
-
Medium 6.5
phpMyAdmin Local file exposure
An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17…
-
Medium 6.5
phpMyAdmin DoS Vulnerability
An issue was discovered in phpMyAdmin. An authorized user can cause a denial-of-service (DoS) attack on a server by passing large values to a loop. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17…
-
Medium 5.9
phpMyAdmin DoS Vulnerability
An issue was discovered in phpMyAdmin. An unauthenticated user is able to execute a denial-of-service (DoS) attack by forcing persistent connections when phpMyAdmin is running with $cfg['AllowArbitraryServer']=true. All 4.6.x versions (prior to 4.6.4), 4.4.x …
-
Medium 5.9
phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention
An issue was discovered in phpMyAdmin involving improper enforcement of the IP-based authentication rules. When phpMyAdmin is used with IPv6 in a proxy server environment, and the proxy server is in the allowed range but the attacking computer is not allowed,…
-
Medium 5.3
phpMyAdmin Local file exposure through symlinks with UploadDir
An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which phpMyAdmin will then expose to the user. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior…
-
Unscored —
An issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username/password is vulnerable to a …
-
Unscored —
XSS issues were discovered in phpMyAdmin. This affects Zoom search (specially crafted column content can be used to tri…
-
Unscored —
An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL inj…
-
Unscored —
An issue was discovered in phpMyAdmin involving the %u username replacement functionality of the SaveDir and UploadDir …
-
Unscored —
An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize() function without verification that …
-
Unscored —
An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service (DoS) attack by entering a…
-
Unscored —
An issue was discovered in phpMyAdmin. A user can execute a remote code execution attack against a server when phpMyAdm…