| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyadmin/phpmyadmin | ≥ 4.3.0, < 4.3.13.2≥ 4.4.0, < 4.4.14.1 | 4.3.13.24.4.14.1 |
| phpmyadmin | = 4.3.0= 4.3.1= 4.3.10= 4.3.11= 4.3.12= 4.3.13.1= 4.3.2= 4.3.3= 4.3.4= 4.3.5= 4.3.6= 4.3.7= 4.3.8= 4.3.9= 4.4.0= 4.4.1= 4.4.1.1= 4.4.10= 4.4.11= 4.4.12= 4.4.13= 4.4.13.1= 4.4.14= 4.4.3= 4.4.4= 4.4.5= 4.4.6= 4.4.6.1= 4.4.7= 4.4.8= 4.4.9 |
libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free