Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2016-2561

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x before 4.5.5.1 allow remote authenticated users to inject arbitrary web script or HTML via (1) normalization.php or (2) js/normalization.js in the database normalization page, (3) templates/database/structure/sortable_header.phtml in the database structure page, or (4) the pos parameter to db_central_columns.php in the central columns page.

  • Published: Mar 1, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2016-2561
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
phpmyadmin / phpmyadmin 4.4.13.1 4.4.13.1.x
phpmyadmin / phpmyadmin 4.4.6 4.4.6.x
phpmyadmin / phpmyadmin 4.4.2 4.4.2.x
phpmyadmin / phpmyadmin 4.4.1.1 4.4.1.1.x
phpmyadmin / phpmyadmin 4.4.15 4.4.15.x
phpmyadmin / phpmyadmin 4.4.14 4.4.14.x
phpmyadmin / phpmyadmin 4.4.15.4 4.4.15.4.x
phpmyadmin / phpmyadmin 4.5.0-rc1 4.5.0-rc1.x
phpmyadmin / phpmyadmin 4.4.6.1 4.4.6.1.x
phpmyadmin / phpmyadmin 4.4.0 4.4.0.x
phpmyadmin / phpmyadmin 4.5.0-beta1 4.5.0-beta1.x
phpmyadmin / phpmyadmin 4.5.4 4.5.4.x
phpmyadmin / phpmyadmin 4.4.1 4.4.1.x
phpmyadmin / phpmyadmin 4.5.3.1 4.5.3.1.x
phpmyadmin / phpmyadmin 4.4.11 4.4.11.x
phpmyadmin / phpmyadmin 4.4.9 4.4.9.x
phpmyadmin / phpmyadmin 4.5.1 4.5.1.x
phpmyadmin / phpmyadmin 4.5.0.2 4.5.0.2.x
phpmyadmin / phpmyadmin 4.4.8 4.4.8.x
phpmyadmin / phpmyadmin 4.5.2 4.5.2.x
phpmyadmin / phpmyadmin 4.5.0 4.5.0.x
phpmyadmin / phpmyadmin 4.4.15.2 4.4.15.2.x
phpmyadmin / phpmyadmin 4.4.7 4.4.7.x
phpmyadmin / phpmyadmin 4.4.3 4.4.3.x
phpmyadmin / phpmyadmin 4.4.12 4.4.12.x
phpmyadmin / phpmyadmin 4.5.0-beta2 4.5.0-beta2.x
phpmyadmin / phpmyadmin 4.4.5 4.4.5.x
phpmyadmin / phpmyadmin 4.4.13 4.4.13.x
phpmyadmin / phpmyadmin 4.5.4.1 4.5.4.1.x
phpmyadmin / phpmyadmin 4.5.3 4.5.3.x
phpmyadmin / phpmyadmin 4.4.15.3 4.4.15.3.x
phpmyadmin / phpmyadmin 4.5.5 4.5.5.x
phpmyadmin / phpmyadmin 4.4.10 4.4.10.x
phpmyadmin / phpmyadmin 4.4.15.1 4.4.15.1.x
phpmyadmin / phpmyadmin 4.4.4 4.4.4.x
phpmyadmin / phpmyadmin 4.5.0.1 4.5.0.1.x
phpmyadmin / phpmyadmin 4.4.14.1 4.4.14.1.x