phpMyAdmin multiple vulnerabilities

Last Update Date: 29 Nov 2016 09:42 Release Date: 29 Nov 2016 2801 Views

RISK: Medium Risk

TYPE: Servers - Database Servers

Multiple vulnerabilities were identified in phpMyAdmin, a remote attacker may exploit these vulnerabilities to cause Cross Site Scripting, Remote Code Execution, Security Restriction Bypass, Tampering and Denial Of Service on the targeted system.

Impact

Cross-Site Scripting
Denial of Service
Remote Code Execution
Security Restriction Bypass
Information Disclosure
Data Manipulation

System / Technologies affected

4.6.x (prior to 4.6.5)
4.4.x (prior to 4.4.15.9)
4.0.x (prior to 4.0.10.18)

for detail, please refer to the link below:

https://www.auscert.org.au/render.html?it=41294

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Upgrade to

4.6.5
4.4.15.9
4.0.10.18