Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2016-6607 →
Catégories
DEBIAN-CVE-2016-6607

XSS issues were discovered in phpMyAdmin. This affects Zoom search (specially crafted column content can be used to trigger an XSS attack); GIS editor...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

XSS issues were discovered in phpMyAdmin. This affects Zoom search (specially crafted column content can be used to trigger an XSS attack); GIS editor (certain fields in the graphical GIS editor are not properly escaped and can be used to trigger an XSS attack); Relation view; the following Transformations: Formatted, Imagelink, JPEG: Upload, RegexValidation, JPEG inline, PNG inline, and transformation wrapper; XML export; MediaWiki export; Designer; When the MySQL server is running with a specially-crafted log_bin directive; Database tab; Replication feature; and Database search. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]
Debian:13 phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]
Debian:14 phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]

Références

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus