Home > Vulnerability Database > CVE-2015-7873

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2015-7873

Good to know:

Date: October 28, 2015

The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter.

Language: PHP

Severity Score

5.3

Related Resources (12)

Url: http://www.securitytracker.com/id/1034013

Url: https://nvd.nist.gov/vuln/detail/CVE-2015-7873

Url: https://github.com/phpmyadmin/phpmyadmin/commit/cd097656758f981f80fb9029c7d6b4294582b706

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171326.html

Url: https://www.phpmyadmin.net/security/PMASA-2015-5/

Url: https://security-tracker.debian.org/tracker/CVE-2015-7873

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2015-7873

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171311.html

Url: http://www.debian.org/security/2015/dsa-3382

Url: http://www.securityfocus.com/bid/77299

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169987.html

Url: https://www.mend.io/vulnerability-database/CVE-2015-7873

Severity Score

5.3

Weakness Type (CWE)

Security Features

CWE-254

Top Fix

Upgrade Version

Upgrade to version RELEASE_4_4_15_1,RELEASE_4_5_1

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us