{"id":"CVE-2018-15605","published":"2018-08-24T19:00:00Z","modified":"2024-08-05T10:01:54Z","title":"An issue was discovered in phpMyAdmin before 4.8.3","vendor":null,"product":null,"tier":"tail","description":{"text":"An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01697,"percentile":0.77086,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/105168","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1041548","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://github.com/phpmyadmin/phpmyadmin/commit/00d90b3ae415b31338f76263359467a9fbebd0a1","tags":["x_refsource_CONFIRM"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2018-5/","tags":["x_refsource_CONFIRM"]}],"priority":{"score":15.4,"factors":[{"name":"EPSS percentile","points":15.42}]},"affected":[{"ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","vulnerableRanges":["<4.8.3"],"patched":["4.8.3"],"from":["GHSA-c958-4j9x-q7w4"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3544","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2018-10188","published":"2018-04-19","fixed":"4.8.0.1","kev":false},{"cve":"CVE-2018-12581","published":"2018-06-21","fixed":"4.8.2","kev":false},{"cve":"CVE-2018-12613","published":"2018-06-21","fixed":"4.8.2","kev":false,"link":{"from":"CVE-2018-12613","to":"CVE-2018-15605","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:phpmyadmin/phpmyadmin","fromFixed":"4.8.2","toFixed":"4.8.3","daysApart":64}]}},{"cve":"CVE-2018-15605","published":"2018-08-24","fixed":"4.8.3","kev":false},{"cve":"CVE-2018-19968","published":"2018-12-11","fixed":"4.8.4","kev":false,"link":{"from":"CVE-2018-15605","to":"CVE-2018-19968","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:phpmyadmin/phpmyadmin","fromFixed":"4.8.3","toFixed":"4.8.4","daysApart":109}]}},{"cve":"CVE-2018-19969","published":"2018-12-11","fixed":"4.8.4","kev":false,"link":{"from":"CVE-2018-15605","to":"CVE-2018-19969","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:phpmyadmin/phpmyadmin","fromFixed":"4.8.3","toFixed":"4.8.4","daysApart":109}]}},{"cve":"CVE-2018-19970","published":"2018-12-11","fixed":"4.8.4","kev":false,"link":{"from":"CVE-2018-15605","to":"CVE-2018-19970","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:phpmyadmin/phpmyadmin","fromFixed":"4.8.3","toFixed":"4.8.4","daysApart":109}]}}],"package":"Packagist:phpmyadmin/phpmyadmin"}}