Oval Definition:oval:com.ubuntu.xenial:def:201463000000000
Revision Date:2014-11-08Version:1
Title:CVE-2014-6300 on Ubuntu 16.04 LTS (xenial) - medium.
Description:Cross-site scripting (XSS) vulnerability in the micro history implementation in phpMyAdmin 4.0.x before 4.0.10.3, 4.1.x before 4.1.14.4, and 4.2.x before 4.2.8.1 allows remote attackers to inject arbitrary web script or HTML, and consequently conduct a cross-site request forgery (CSRF) attack to create a root account, via a crafted URL, related to js/ajax.js.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-6300
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND phpmyadmin package in xenial, is related to the CVE in some way and has been fixed (note: '4:4.2.8.1-1').
    • BACK