| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin/phpmyadmin | ≥ 4.4.0, < 4.4.15.10≥ 4.6.0, < 4.6.6< 4.0.10.19 | 4.4.15.104.6.64.0.10.19 |
| phpmyadmin | = 4.4.0= 4.4.1= 4.4.1.1= 4.4.10= 4.4.11= 4.4.12= 4.4.13= 4.4.13.1= 4.4.14.1= 4.4.15= 4.4.15.1= 4.4.15.2= 4.4.15.3= 4.4.15.4= 4.4.15.5= 4.4.15.6= 4.4.15.8= 4.4.15.9= 4.4.2= 4.4.3= 4.4.4= 4.4.5= 4.4.6= 4.4.6.1= 4.4.7= 4.4.8= 4.4.9= 4.6.0= 4.6.1= 4.6.2= 4.6.4= 4.6.5≤ 4.0.10.18 |
The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free