{"id":"CVE-2018-10188","published":"2018-04-19T14:00:00Z","modified":"2024-08-05T07:32:01Z","title":"phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to…","vendor":null,"product":null,"tier":"tail","description":{"text":"phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.04057,"percentile":0.90614,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/103936","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1040752","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2018-2/","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/44496/","tags":["exploit","x_refsource_EXPLOIT-DB"]}],"priority":{"score":23.1,"factors":[{"name":"EPSS percentile","points":18.12},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-04-23"},"first":{"date":"2018-04-23","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/44496"},"provenance":"source"},"affected":[{"ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","vulnerableRanges":[">=4.8, <4.8.0.1"],"patched":["4.8.0.1"],"from":["GHSA-v6fp-h79x-9rqc"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-5295","exploited":false,"provenance":"source"},"exploits":[{"id":44496,"url":"https://www.exploit-db.com/exploits/44496","title":"phpMyAdmin 4.8.0 < 4.8.0-1 - Cross-Site Request Forgery","date":"2018-04-23","verified":false,"provenance":"source"}],"exploitRefs":["https://www.exploit-db.com/exploits/44496/","https://www.exploit-db.com/exploits/44496"],"lineage":{"packageHistory":[{"cve":"CVE-2017-18264","published":"2018-05-01","fixed":"4.7.0","kev":false},{"cve":"CVE-2017-1000499","published":"2018-01-03","fixed":"4.7.7","kev":false},{"cve":"CVE-2018-7260","published":"2018-02-21","fixed":"4.7.8","kev":false},{"cve":"CVE-2018-10188","published":"2018-04-19","fixed":"4.8.0.1","kev":false},{"cve":"CVE-2018-12581","published":"2018-06-21","fixed":"4.8.2","kev":false,"link":{"from":"CVE-2018-10188","to":"CVE-2018-12581","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:phpmyadmin/phpmyadmin","fromFixed":"4.8.0.1","toFixed":"4.8.2","daysApart":63}]}},{"cve":"CVE-2018-12613","published":"2018-06-21","fixed":"4.8.2","kev":false,"link":{"from":"CVE-2018-10188","to":"CVE-2018-12613","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:phpmyadmin/phpmyadmin","fromFixed":"4.8.0.1","toFixed":"4.8.2","daysApart":63}]}},{"cve":"CVE-2018-15605","published":"2018-08-24","fixed":"4.8.3","kev":false}],"package":"Packagist:phpmyadmin/phpmyadmin"}}