GHSA-44vv-mm86-7cg6

ghsaUSosv

phpMyAdmin server-side request forgery (SSRF)

view advisory published 2022-05-14Licence: CC-BY-4.0

The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2016-6621US	high8.6	1.93% (80th)	—	2017-01-31
The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via u…

references

External citations — patches, advisories, analysis.

https://github.com/phpmyadmin/composerPACKAGE
https://lists.debian.org/debian-lts-announce/2018/07/msg00006.htmlWEB
https://nvd.nist.gov/vuln/detail/CVE-2016-6621ADVISORY
https://www.phpmyadmin.net/security/PMASA-2016-44WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan