CVE-2016-5702

phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHP_SELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted…

published July 3, 2016

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHP_SELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01689 · 76.7th percentile
Published
2016-07-03T01:00Z
EPSS history
Timeline
  • 03 JUL 01:00Z
    phpMyAdmin 4.6.x before 4.6.3, when the environment lacks a PHP_SELF value, allows remote attackers to conduct cookie-attribute injection attacks via a crafted…
    cvelistv5