phpMyAdmin allows remote attackers to spoof content via the url parameter
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-7873US | medium5.0 | — | ||
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter. | ||||
02
references
External citations — patches, advisories, analysis.
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171311.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171326.htmlWEB
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169987.htmlWEB
- http://www.debian.org/security/2015/dsa-3382WEB
- https://github.com/phpmyadmin/phpmyadminPACKAGE
- https://github.com/phpmyadmin/phpmyadmin/commit/2b31866fe0b30b867aaf5b5fedb11adb354e037fWEB
- https://github.com/phpmyadmin/phpmyadmin/commit/cd097656758f981f80fb9029c7d6b4294582b706WEB
- https://nvd.nist.gov/vuln/detail/CVE-2015-7873ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan