WID-SEC-W-2022-0247

DeutschShown in its original language — a full translation is planned for a future version.

phpMyAdmin: Mehrere Schwachstellen

view advisory published 2022-01-23

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in phpMyAdmin ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Cross Site Scripting Angriff durchzuführen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-23808US	medium6.1	7.94% (95th)	Exploit	2022-01-22
An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.
CVE-2022-23807US	medium4.3	0.74% (54th)	—	2022-01-22
An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-fact…

references

External citations — patches, advisories, analysis.

PoC CVE-2022-23808 vom 2022-06-09external
Gentoo Linux Security Advisory GLSA-202311-17 vom 2023-11-26external
WID-SEC-W-2022-0247 - CSAF Versionself
WID-SEC-2022-0247 - Portal Versionself
phpMyAdmin Security Announcement vom 2022-01-23external
phpMyAdmin Security Announcement vom 2022-01-23external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan