The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "4:4.5.1-1", "binary_name": "phpmyadmin" } ] }