CVE-2016-2040 in phpMyAdmin信息

摘要

由 MITRE

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) table name, (2) SET value, (3) search query, or (4) hostname in a Location header.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2016-01-21

披露

2016-02-19

管理

已接受

条目

VDB-81039

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

5.4 (NVD)

EPSS

0.01642

KEV

否

活动

非常低

部门

Government, Telecommunication, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2016-2040
NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-2040
CVE Details	https://www.cvedetails.com/cve/CVE-2016-2040/

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!