CVE Vulnerabilities

CVE-2015-7873

Published: Oct 28, 2015 | Modified: Dec 07, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter.

Affected Software

Name Vendor Start Version End Version
Phpmyadmin Phpmyadmin 4.4.0 (including) 4.4.0 (including)
Phpmyadmin Phpmyadmin 4.4.1 (including) 4.4.1 (including)
Phpmyadmin Phpmyadmin 4.4.1.1 (including) 4.4.1.1 (including)
Phpmyadmin Phpmyadmin 4.4.2 (including) 4.4.2 (including)
Phpmyadmin Phpmyadmin 4.4.3 (including) 4.4.3 (including)
Phpmyadmin Phpmyadmin 4.4.4 (including) 4.4.4 (including)
Phpmyadmin Phpmyadmin 4.4.5 (including) 4.4.5 (including)
Phpmyadmin Phpmyadmin 4.4.6 (including) 4.4.6 (including)
Phpmyadmin Phpmyadmin 4.4.6.1 (including) 4.4.6.1 (including)
Phpmyadmin Phpmyadmin 4.4.7 (including) 4.4.7 (including)
Phpmyadmin Phpmyadmin 4.4.8 (including) 4.4.8 (including)
Phpmyadmin Phpmyadmin 4.4.9 (including) 4.4.9 (including)
Phpmyadmin Phpmyadmin 4.4.10 (including) 4.4.10 (including)
Phpmyadmin Phpmyadmin 4.4.11 (including) 4.4.11 (including)
Phpmyadmin Phpmyadmin 4.4.12 (including) 4.4.12 (including)
Phpmyadmin Phpmyadmin 4.4.13 (including) 4.4.13 (including)
Phpmyadmin Phpmyadmin 4.4.13.1 (including) 4.4.13.1 (including)
Phpmyadmin Phpmyadmin 4.4.14 (including) 4.4.14 (including)
Phpmyadmin Phpmyadmin 4.4.14.1 (including) 4.4.14.1 (including)
Phpmyadmin Phpmyadmin 4.4.15 (including) 4.4.15 (including)
Phpmyadmin Phpmyadmin 4.5.0 (including) 4.5.0 (including)
Phpmyadmin Phpmyadmin 4.5.0.1 (including) 4.5.0.1 (including)
Phpmyadmin Phpmyadmin 4.5.0.2 (including) 4.5.0.2 (including)

References