CVE-2016-2559
1 advisory.
Packagist/phpmyadmin/phpmyadmin CVE-2016-2559: medium 5.4
phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser
Action: Upgrade phpmyadmin/phpmyadmin to 4.5.5.1 or later.
composer require phpmyadmin/phpmyadmin:4.5.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.5 | 4.5.5.1 | - |
Fixed versions
| 4.5.5.1 |
Sources
- osv: GHSA-7rf8-9r8f-qf59
- https://nvd.nist.gov/vuln/detail/CVE-2016-2559
- https://github.com/phpmyadmin/phpmyadmin/commit/3a6a9a807d99371ee126635e1a505fc1fe0df32c
- https://github.com/phpmyadmin/composer
- https://www.phpmyadmin.net/security/PMASA-2016-10
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178562.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178869.html
CVE-2016-2559 · published · modified · JSON