Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) server-privileges certificate data fields on the user privileges page, (2) an "invalid JSON" error message in the error console, (3) a database name in the central columns implementation, (4) a group name, or (5) a search name in the bookmarks implementation.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"range": [
{
"introduced": "42.1"
},
{
"last_affected": "42.1"
}
],
"source": "CPE_STRING"
}
],
"vendor_product": "opensuse:leap"
},
{
"cpes": [
"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",
"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"range": [
{
"introduced": "13.1"
},
{
"last_affected": "13.1"
},
{
"introduced": "13.2"
},
{
"last_affected": "13.2"
}
],
"source": "CPE_STRING"
}
],
"vendor_product": "opensuse:opensuse"
}
]
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.6.0"
},
{
"last_affected": "4.6.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.6.0-alpha1"
},
{
"last_affected": "4.6.0-alpha1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*",
"range": [
{
"introduced": "4.6.0-rc1"
},
{
"last_affected": "4.6.0-rc1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*",
"range": [
{
"introduced": "4.6.0-rc2"
},
{
"last_affected": "4.6.0-rc2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.6.1"
},
{
"last_affected": "4.6.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.6.2"
},
{
"last_affected": "4.6.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.0"
},
{
"last_affected": "4.4.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.1"
},
{
"last_affected": "4.4.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.1.1"
},
{
"last_affected": "4.4.1.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.2"
},
{
"last_affected": "4.4.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.3"
},
{
"last_affected": "4.4.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.4"
},
{
"last_affected": "4.4.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.5"
},
{
"last_affected": "4.4.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.6"
},
{
"last_affected": "4.4.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.6.1"
},
{
"last_affected": "4.4.6.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.7"
},
{
"last_affected": "4.4.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.8"
},
{
"last_affected": "4.4.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.9"
},
{
"last_affected": "4.4.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.10"
},
{
"last_affected": "4.4.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.11"
},
{
"last_affected": "4.4.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.12"
},
{
"last_affected": "4.4.12"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.13"
},
{
"last_affected": "4.4.13"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.13.1"
},
{
"last_affected": "4.4.13.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.14.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.14.1"
},
{
"last_affected": "4.4.14.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15"
},
{
"last_affected": "4.4.15"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.1"
},
{
"last_affected": "4.4.15.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.2"
},
{
"last_affected": "4.4.15.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.3"
},
{
"last_affected": "4.4.15.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.4"
},
{
"last_affected": "4.4.15.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.5"
},
{
"last_affected": "4.4.15.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.15.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.15.6"
},
{
"last_affected": "4.4.15.6"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "03f73d48369703e0d3584699b08e24891c3295b8"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "0b7416c5f4439ed3f11c023785f2d4c49a1b09fc"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "364732e309cccb3fb56c938ed8d8bc0e04a3ca98"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "36df83a97a7f140fdb008b727a94f882847c6a6f"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "57ae483bad33059a885366d5445b7e1f6f29860a"
}
],
"source": "REFERENCES_COMMIT"
}
]
}