CVE-2015-2206

Published: Mar 9, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

libraries/select_lang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 includes invalid language values in unknown-language error responses that contain a CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.

Affected (57)

Products: Fedoraproject: Fedora · Phpmyadmin: Phpmyadmin

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 20
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22

Configuration B

54 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.0.0
Phpmyadmin Phpmyadmin	Version 4.0.0 rc2
Phpmyadmin Phpmyadmin	Version 4.0.0 rc3
Phpmyadmin Phpmyadmin	Version 4.0.10.1
Phpmyadmin Phpmyadmin	Version 4.0.10.2
Phpmyadmin Phpmyadmin	Version 4.0.10.3
Phpmyadmin Phpmyadmin	Version 4.0.10.4
Phpmyadmin Phpmyadmin	Version 4.0.10.5
Phpmyadmin Phpmyadmin	Version 4.0.10.6
Phpmyadmin Phpmyadmin	Version 4.0.10.7
Phpmyadmin Phpmyadmin	Version 4.0.10.8
Phpmyadmin Phpmyadmin	Version 4.0.10
Phpmyadmin Phpmyadmin	Version 4.0.1
Phpmyadmin Phpmyadmin	Version 4.0.2
Phpmyadmin Phpmyadmin	Version 4.0.3
Phpmyadmin Phpmyadmin	Version 4.0.4.1
Phpmyadmin Phpmyadmin	Version 4.0.4.2
Phpmyadmin Phpmyadmin	Version 4.0.4
Phpmyadmin Phpmyadmin	Version 4.0.5
Phpmyadmin Phpmyadmin	Version 4.0.6
Phpmyadmin Phpmyadmin	Version 4.0.7
Phpmyadmin Phpmyadmin	Version 4.0.8
Phpmyadmin Phpmyadmin	Version 4.0.9
Phpmyadmin Phpmyadmin	Version 4.2.0
Phpmyadmin Phpmyadmin	Version 4.2.10.1
Phpmyadmin Phpmyadmin	Version 4.2.10
Phpmyadmin Phpmyadmin	Version 4.2.11
Phpmyadmin Phpmyadmin	Version 4.2.12
Phpmyadmin Phpmyadmin	Version 4.2.13.1
Phpmyadmin Phpmyadmin	Version 4.2.13
Phpmyadmin Phpmyadmin	Version 4.2.1
Phpmyadmin Phpmyadmin	Version 4.2.2
Phpmyadmin Phpmyadmin	Version 4.2.3
Phpmyadmin Phpmyadmin	Version 4.2.4
Phpmyadmin Phpmyadmin	Version 4.2.5
Phpmyadmin Phpmyadmin	Version 4.2.6
Phpmyadmin Phpmyadmin	Version 4.2.7.1
Phpmyadmin Phpmyadmin	Version 4.2.7
Phpmyadmin Phpmyadmin	Version 4.2.8.1
Phpmyadmin Phpmyadmin	Version 4.2.8
Phpmyadmin Phpmyadmin	Version 4.2.9.1
Phpmyadmin Phpmyadmin	Version 4.2.9
Phpmyadmin Phpmyadmin	Version 4.3.0
Phpmyadmin Phpmyadmin	Version 4.3.10
Phpmyadmin Phpmyadmin	Version 4.3.11
Phpmyadmin Phpmyadmin	Version 4.3.1
Phpmyadmin Phpmyadmin	Version 4.3.2
Phpmyadmin Phpmyadmin	Version 4.3.3
Phpmyadmin Phpmyadmin	Version 4.3.4
Phpmyadmin Phpmyadmin	Version 4.3.5
Phpmyadmin Phpmyadmin	Version 4.3.6
Phpmyadmin Phpmyadmin	Version 4.3.7
Phpmyadmin Phpmyadmin	Version 4.3.8
Phpmyadmin Phpmyadmin	Version 4.3.9