phpmyadmin - security update

Fixed packages 2

Vulnerabilities 7

• Unscored —
  CVE-2014-8958

  Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.6, 4.1.x before 4.1.14.7, and 4.2…

  phpmyadmin phpmyadmin Debian Ubuntu
  Nov 30, 2014
• Unscored —
  CVE-2014-9218 Public exploit EPSS 11%

  libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows r…

  phpmyadmin phpmyadmin Debian Ubuntu
  Dec 8, 2014
• Unscored —
  CVE-2015-2206

  libraries/select_lang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 inc…

  phpmyadmin phpmyadmin Debian Ubuntu
  Mar 9, 2015
• Unscored —
  CVE-2015-3902

  Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4…

  phpmyadmin phpmyadmin Debian Ubuntu
  May 26, 2015
• Unscored —
  CVE-2015-3903

  libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.…

  phpmyadmin phpmyadmin Debian Ubuntu
  May 26, 2015
• Medium —
  CVE-2015-6830 Public exploit EPSS 10%

  phpMyAdmin ReCaptcha bypass

  libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct resp…

  phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  Sep 14, 2015
• High —
  CVE-2015-7873

  phpMyAdmin allows remote attackers to spoof content via the url parameter

  The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter.

  phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  Oct 28, 2015