| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin/phpmyadmin | ≥ 4.0, < 4.0.10.18≥ 4.4, < 4.4.15.9≥ 4.6, < 4.6.5 | 4.0.10.184.4.15.94.6.5 |
| phpmyadmin | = 4.0.0= 4.0.1= 4.0.10= 4.0.10.1= 4.0.10.10= 4.0.10.11= 4.0.10.12= 4.0.10.13= 4.0.10.14= 4.0.10.15= 4.0.10.16= 4.0.10.17= 4.0.10.2= 4.0.10.3= 4.0.10.4= 4.0.10.5= 4.0.10.6= 4.0.10.7= 4.0.10.8= 4.0.10.9= 4.0.2= 4.0.3= 4.0.4= 4.0.4.1= 4.0.4.2= 4.0.5= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.4.0= 4.4.1= 4.4.1.1= 4.4.10= 4.4.11= 4.4.12= 4.4.13= 4.4.13.1= 4.4.14= 4.4.14.1= 4.4.15= 4.4.15.1= 4.4.15.2= 4.4.15.3= 4.4.15.4= 4.4.15.5= 4.4.15.6= 4.4.15.7= 4.4.15.8= 4.4.2= 4.4.3= 4.4.4= 4.4.5= 4.4.6= 4.4.6.1= 4.4.7= 4.4.8= 4.4.9= 4.6.0= 4.6.1= 4.6.2= 4.6.3= 4.6.4 |
An XSS issue was discovered in phpMyAdmin because of an improper fix for CVE-2016-2559 in PMASA-2016-10. This issue is resolved by using a copy of a hash to avoid a race condition. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free