phpMyAdmin: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 6.1
  CVE-2022-23808 Public exploit Scanner template

  Cross-site Scripting in phpmyadmin

  An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.

  phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  Jan 22, 2022
• Medium 4.3
  CVE-2022-23807

  Improper Authentication in phpmyadmin

  An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances.

  phpmyadmin phpmyadmin phpmyadmin/phpmyadmin phpmyadmin Debian Ubuntu Alpine Packagist
  Jan 22, 2022

Revision history

1. 2023-11-26 #4

   Neue Updates von Gentoo aufgenommen

2. 2022-06-09 #3

   PoC für CVE-2022-23808 aufgenommen

3. 2022-01-24 #2

   Referenz(en) aufgenommen: FEDORA-2022-914FA8641A, FEDORA-2022-3544C7D20E

4. 2022-01-23 #1

   Initiale Fassung

References

• Gentoo Linux Security Advisory GLSA-202311-17 vom 2023-11-26
  https://security.gentoo.org/glsa/202311-17
• phpMyAdmin Security Announcement vom 2022-01-23
  https://www.phpmyadmin.net/security/PMASA-2022-1/
• phpMyAdmin Security Announcement vom 2022-01-23
  https://www.phpmyadmin.net/security/PMASA-2022-2/
• PoC CVE-2022-23808 vom 2022-06-09
  https://github.com/Trhackno/CVE-2022-23808