CVE-2015-6830

libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha.

Published: Sep 14, 2015
Updated: Apr 13, 2023
CVE: CVE-2015-6830
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

CWE-200

Affected Software
References

Software	From	Fixed in
phpmyadmin / phpmyadmin	4.4.13.1	4.4.13.1.x
phpmyadmin / phpmyadmin	4.3.1	4.3.1.x
phpmyadmin / phpmyadmin	4.4.6	4.4.6.x
phpmyadmin / phpmyadmin	4.3.12	4.3.12.x
phpmyadmin / phpmyadmin	4.3.2	4.3.2.x
phpmyadmin / phpmyadmin	4.3.5	4.3.5.x
phpmyadmin / phpmyadmin	4.4.1.1	4.4.1.1.x
phpmyadmin / phpmyadmin	4.4.14	4.4.14.x
phpmyadmin / phpmyadmin	4.3.11	4.3.11.x
phpmyadmin / phpmyadmin	4.3.4	4.3.4.x
phpmyadmin / phpmyadmin	4.4.6.1	4.4.6.1.x
phpmyadmin / phpmyadmin	4.4.0	4.4.0.x
phpmyadmin / phpmyadmin	4.3.6	4.3.6.x
phpmyadmin / phpmyadmin	4.4.1	4.4.1.x
phpmyadmin / phpmyadmin	4.4.11	4.4.11.x
phpmyadmin / phpmyadmin	4.4.9	4.4.9.x
phpmyadmin / phpmyadmin	4.3.10	4.3.10.x
phpmyadmin / phpmyadmin	4.3.13.1	4.3.13.1.x
phpmyadmin / phpmyadmin	4.4.8	4.4.8.x
phpmyadmin / phpmyadmin	4.3.8	4.3.8.x
phpmyadmin / phpmyadmin	4.3.9	4.3.9.x
phpmyadmin / phpmyadmin	4.3.3	4.3.3.x
phpmyadmin / phpmyadmin	4.4.7	4.4.7.x
phpmyadmin / phpmyadmin	4.4.3	4.4.3.x
phpmyadmin / phpmyadmin	4.4.12	4.4.12.x
phpmyadmin / phpmyadmin	4.3.0	4.3.0.x
phpmyadmin / phpmyadmin	4.4.5	4.4.5.x
phpmyadmin / phpmyadmin	4.4.13	4.4.13.x
phpmyadmin / phpmyadmin	4.3.7	4.3.7.x
phpmyadmin / phpmyadmin	4.4.10	4.4.10.x
phpmyadmin / phpmyadmin	4.4.4	4.4.4.x

Vulnerability Database

290,020

CVE-2015-6830