CVE-2015-3902

Published: May 26, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configuration file.

Affected (56)

Products: Phpmyadmin: Phpmyadmin

Phpmyadmin

1 product

Phpmyadmin

Configuration A

56 vulnerable

Vulnerable Software	Affected Versions
Phpmyadmin Phpmyadmin	Version 4.0.0
Phpmyadmin Phpmyadmin	Version 4.0.0 rc2
Phpmyadmin Phpmyadmin	Version 4.0.0 rc3
Phpmyadmin Phpmyadmin	Version 4.0.10.2
Phpmyadmin Phpmyadmin	Version 4.0.10.5
Phpmyadmin Phpmyadmin	Version 4.0.10.6
Phpmyadmin Phpmyadmin	Version 4.0.10.7
Phpmyadmin Phpmyadmin	Version 4.0.10.8
Phpmyadmin Phpmyadmin	Version 4.0.10.9
Phpmyadmin Phpmyadmin	Version 4.0.10
Phpmyadmin Phpmyadmin	Version 4.0.1
Phpmyadmin Phpmyadmin	Version 4.0.2
Phpmyadmin Phpmyadmin	Version 4.0.3
Phpmyadmin Phpmyadmin	Version 4.0.4.1
Phpmyadmin Phpmyadmin	Version 4.0.4.2
Phpmyadmin Phpmyadmin	Version 4.0.4
Phpmyadmin Phpmyadmin	Version 4.0.5
Phpmyadmin Phpmyadmin	Version 4.0.6
Phpmyadmin Phpmyadmin	Version 4.0.7
Phpmyadmin Phpmyadmin	Version 4.0.8
Phpmyadmin Phpmyadmin	Version 4.0.9
Phpmyadmin Phpmyadmin	Version 4.2.0
Phpmyadmin Phpmyadmin	Version 4.2.10.1
Phpmyadmin Phpmyadmin	Version 4.2.11
Phpmyadmin Phpmyadmin	Version 4.2.12
Phpmyadmin Phpmyadmin	Version 4.2.13.1
Phpmyadmin Phpmyadmin	Version 4.2.13.2
Phpmyadmin Phpmyadmin	Version 4.2.1
Phpmyadmin Phpmyadmin	Version 4.2.2
Phpmyadmin Phpmyadmin	Version 4.2.3
Phpmyadmin Phpmyadmin	Version 4.2.4
Phpmyadmin Phpmyadmin	Version 4.2.5
Phpmyadmin Phpmyadmin	Version 4.2.7.1
Phpmyadmin Phpmyadmin	Version 4.2.7
Phpmyadmin Phpmyadmin	Version 4.2.9.1
Phpmyadmin Phpmyadmin	Version 4.3.0
Phpmyadmin Phpmyadmin	Version 4.3.10
Phpmyadmin Phpmyadmin	Version 4.3.11
Phpmyadmin Phpmyadmin	Version 4.3.12
Phpmyadmin Phpmyadmin	Version 4.3.13
Phpmyadmin Phpmyadmin	Version 4.3.1
Phpmyadmin Phpmyadmin	Version 4.3.2
Phpmyadmin Phpmyadmin	Version 4.3.3
Phpmyadmin Phpmyadmin	Version 4.3.4
Phpmyadmin Phpmyadmin	Version 4.3.5
Phpmyadmin Phpmyadmin	Version 4.3.6
Phpmyadmin Phpmyadmin	Version 4.3.7
Phpmyadmin Phpmyadmin	Version 4.3.8
Phpmyadmin Phpmyadmin	Version 4.3.9
Phpmyadmin Phpmyadmin	Version 4.4.0
Phpmyadmin Phpmyadmin	Version 4.4.1.1
Phpmyadmin Phpmyadmin	Version 4.4.1
Phpmyadmin Phpmyadmin	Version 4.4.3
Phpmyadmin Phpmyadmin	Version 4.4.4
Phpmyadmin Phpmyadmin	Version 4.4.5
Phpmyadmin Phpmyadmin	Version 4.4.6