NVD

Id
20072  
Name
CVE-2016-4412  
Description
An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the user"s valid phpMyAdmin token. All 4.0.x versions (prior to 4.0.10.16) are affected.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-12-10  
Modified Date
2016-12-13  
Seq
2016-4412  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
109486 20072 CVE-2016-4412 94519  View
109487 20072 CVE-2016-4412 https://www.phpmyadmin.net/security/PMASA-2016-57  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5426 JVNDB-2016-006199 phpMyAdmin における悪意のあるサイトにリダイレクトされる脆弱性 phpMyAdmin には、悪意のあるサイトにリダイレクトされる脆弱性が存在します。 CVE-2016-4412 90918 CVE-2016-4412 20072 3.6 4.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006199.html 2016-11-25 2016-12-15 View