Description phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters Remediation References CVE-2017-1000015 Related Vulnerabilities Claroline Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3262) WordPress Plugin Car Rental System Cross-Site Scripting (1.3) Ampache Improper Authentication Vulnerability (CVE-2007-4438) WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Cross-Site Scripting (1.7.0.10) Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6927) Severity Medium Classification CVE-2017-1000015 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities