Description

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

Remediation

References

CVE-2017-1000015

Related Vulnerabilities

WordPress Plugin WC Duplicate Order Security Bypass (1.5)

PHP Data Processing Errors Vulnerability (CVE-2015-4026)

PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-5459)

phpMyAdmin Improper Input Validation Vulnerability (CVE-2017-1000014)

Jboss EAP Improper Input Validation Vulnerability (CVE-2016-3110)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2017-1000015