An issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject BBCode in the login page. All 4.6.x versions (prior to 4.6.5) are affected.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/94528 | |
https://security.gentoo.org/glsa/201701-32 | |
https://www.phpmyadmin.net/security/PMASA-2016-67 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2016-12-11 03:00
Updated : 2024-02-28 15:44
NVD link : CVE-2016-9862
Mitre link : CVE-2016-9862
CVE.ORG link : CVE-2016-9862
JSON object : View
Products Affected
phpmyadmin
- phpmyadmin
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')