{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 5.x ant\u00e9rieurs \u00e0 5.2.2",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-2961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-2961"
    }
  ],
  "initial_release_date": "2025-01-22T00:00:00",
  "last_revision_date": "2025-01-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0051",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-01-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans PHPMyAdmin. Elles permettent \u00e0 un attaquant de provoquer une injection de code indirecte \u00e0 distance (XSS) et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": "2025-01-21",
      "title": "Bulletin de s\u00e9curit\u00e9 PHPMyAdmin PMASA-2025-3",
      "url": "https://www.phpmyadmin.net/security/PMASA-2025-3/"
    },
    {
      "published_at": "2025-01-20",
      "title": "Bulletin de s\u00e9curit\u00e9 PHPMyAdmin PMASA-2025-1",
      "url": "https://www.phpmyadmin.net/security/PMASA-2025-1/"
    },
    {
      "published_at": "2025-01-20",
      "title": "Bulletin de s\u00e9curit\u00e9 PHPMyAdmin PMASA-2025-2",
      "url": "https://www.phpmyadmin.net/security/PMASA-2025-2/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 5.x ant\u00e9rieures \u00e0 5.2.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 4.3.0 \u00e0 4.9.x ant\u00e9rieures \u00e0 4.9.11",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2023-02-08T00:00:00",
  "last_revision_date": "2023-02-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2023-AVI-0103",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-02-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans phpMyAdmin. Elle permet \u00e0 un\nattaquant de provoquer une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2023-1 du 07 f\u00e9vrier 2023",
      "url": "https://www.phpmyadmin.net/security/PMASA-2023-1/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 4.9.x ant\u00e9rieures \u00e0 4.9.8",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 5.1.x ant\u00e9rieures \u00e0 5.1.2",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-23807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23807"
    },
    {
      "name": "CVE-2022-23808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23808"
    }
  ],
  "initial_release_date": "2022-01-24T00:00:00",
  "last_revision_date": "2022-01-24T00:00:00",
  "links": [],
  "reference": "CERTFR-2022-AVI-069",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-01-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans phpMyAdmin. Elles\npermettent \u00e0 un attaquant de provoquer un contournement de la politique\nde s\u00e9curit\u00e9 et une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2022-2 du 10 janvier 2022",
      "url": "https://www.phpmyadmin.net/security/PMASA-2022-2"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2022-1 du 10 janvier 2022",
      "url": "https://www.phpmyadmin.net/security/PMASA-2022-1"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 5.0.x versions ant\u00e9rieures \u00e0 5.0.3",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 4.9.x versions ant\u00e9rieures \u00e0 4.9.6",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-26935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26935"
    },
    {
      "name": "CVE-2020-26934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26934"
    }
  ],
  "initial_release_date": "2020-10-12T00:00:00",
  "last_revision_date": "2020-10-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-628",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-10-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans phpMyAdmin. Elles\npermettent \u00e0 un attaquant de provoquer une injection de code indirecte \u00e0\ndistance (XSS) et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2020-5 du 10 octobre 2020",
      "url": "https://www.phpmyadmin.net/security/PMASA-2020-5/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2020-6 du 10 octobre 2020",
      "url": "https://www.phpmyadmin.net/security/PMASA-2020-6/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 4.9.x ant\u00e9rieures \u00e0 4.9.5",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 5.0.x ant\u00e9rieures \u00e0 5.0.2",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-10804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10804"
    },
    {
      "name": "CVE-2020-10802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10802"
    },
    {
      "name": "CVE-2020-10803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-10803"
    }
  ],
  "initial_release_date": "2020-03-23T00:00:00",
  "last_revision_date": "2020-03-23T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2020-3 du 20 mars 2020",
      "url": "https://www.phpmyadmin.net/security/PMASA-2020-3/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2020-2 du 20 mars 2020",
      "url": "https://www.phpmyadmin.net/security/PMASA-2020-2/"
    }
  ],
  "reference": "CERTFR-2020-AVI-167",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-03-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans phpMyAdmin . Elles\npermettent \u00e0 un attaquant de provoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des\ndonn\u00e9es, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection\nde code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2020-3 du 20 mars 2020",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2020-4 du 20 mars 2020",
      "url": "https://www.phpmyadmin.net/security/PMASA-2020-4/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2020-2 du 20 mars 2020",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 5.x ant\u00e9rieures \u00e0 5.0.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.9.4",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-5504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5504"
    }
  ],
  "initial_release_date": "2020-01-08T00:00:00",
  "last_revision_date": "2020-01-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2020-AVI-010",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-01-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans phpMyAdmin. Elle permet \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2020-1 du 05 janvier 2020",
      "url": "https://www.phpmyadmin.net/security/PMASA-2020-1/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin toutes versions ant\u00e9rieures \u00e0 4.9.0",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2019-12616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-12616"
    }
  ],
  "initial_release_date": "2019-06-06T00:00:00",
  "last_revision_date": "2019-06-06T00:00:00",
  "links": [],
  "reference": "CERTFR-2019-AVI-249",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2019-06-06T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans phpMyAdmin. Elle permet \u00e0 un\nattaquant de provoquer une injection de requ\u00eates ill\u00e9gitimes par rebond\n(CSRF).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2019-4 du 04 juin 2019",
      "url": "https://www.phpmyadmin.net/security/PMASA-2019-4/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.8.3",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-15605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-15605"
    }
  ],
  "initial_release_date": "2018-08-23T00:00:00",
  "last_revision_date": "2018-08-23T00:00:00",
  "links": [],
  "reference": "CERTFR-2018-AVI-404",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-08-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans phpMyAdmin . Elle permet \u00e0 un\nattaquant de provoquer une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2018-5 du 21 ao\u00fbt 2018",
      "url": "https://www.phpmyadmin.net/security/PMASA-2018-5/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.8.2.",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-12581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12581"
    },
    {
      "name": "CVE-2018-12613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12613"
    }
  ],
  "initial_release_date": "2018-06-22T00:00:00",
  "last_revision_date": "2018-06-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2018-AVI-300",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-06-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans phpMyAdmin. Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance et une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2018-3 du 19 juin 2018",
      "url": "https://www.phpmyadmin.net/security/PMASA-2018-3/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2018-4 du 19 juin 2018",
      "url": "https://www.phpmyadmin.net/security/PMASA-2018-4/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 4.7.x ant\u00e9rieures \u00e0 4.7.8",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-7260",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7260"
    }
  ],
  "initial_release_date": "2018-02-21T00:00:00",
  "last_revision_date": "2018-02-21T00:00:00",
  "links": [],
  "reference": "CERTFR-2018-AVI-093",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-02-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans phpMyAdmin . Elle permet \u00e0 un\nattaquant de provoquer une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2018-1 du 20 f\u00e9vrier 2018",
      "url": "https://www.phpmyadmin.net/security/PMASA-2018-1/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 4.7.x ant\u00e9rieures \u00e0 4.7.7",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-1000499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-1000499"
    }
  ],
  "initial_release_date": "2018-01-03T00:00:00",
  "last_revision_date": "2018-01-03T00:00:00",
  "links": [],
  "reference": "CERTFR-2018-AVI-001",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-01-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans phpMyAdmin . Elle permet \u00e0 un\nattaquant de provoquer une injection de requ\u00eates ill\u00e9gitimes par rebond\n(CSRF).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2017-9 du 20 d\u00e9cembre 2017",
      "url": "https://www.phpmyadmin.net/security/PMASA-2017-9/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 4.0.X ant\u00e9rieures \u00e0 4.0.10.18",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 4.4.X ant\u00e9rieures \u00e0 4.4.15.19",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 4.6.X ant\u00e9rieures \u00e0 4.6.5",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2016-11-25T00:00:00",
  "last_revision_date": "2016-11-25T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-68 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-68/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-67 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-67/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-62 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-62/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-63 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-63/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-65 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-65/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-70 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-70/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-69 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-69/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-64 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-64/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-71 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-71/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-66 du 25    novembre 2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-66/"
    }
  ],
  "reference": "CERTFR-2016-AVI-390",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-11-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0\nun attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance,\nun d\u00e9ni de service \u00e0 distance et un contournement de la politique de\ns\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-66 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-63 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-67 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-62 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-71 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-68 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-70 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-65 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-64 du 25 novembre 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-69 du 25 novembre 2016",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 4.5.x ant\u00e9rieures \u00e0 4.5.5.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 4.0.x ant\u00e9rieures \u00e0 4.0.10.15",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 4.4.x ant\u00e9rieures \u00e0 4.4.15.5",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2016-2561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2561"
    },
    {
      "name": "CVE-2016-2559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2559"
    },
    {
      "name": "CVE-2016-2560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2560"
    },
    {
      "name": "CVE-2016-2562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-2562"
    }
  ],
  "initial_release_date": "2016-03-03T00:00:00",
  "last_revision_date": "2016-03-03T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-13 du 25 f\u00e9vrier    2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-13/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-11 du 25 f\u00e9vrier    2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-11/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-12 du 25 f\u00e9vrier    2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-12/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-10 du 25 f\u00e9vrier    2016",
      "url": "https://www.phpmyadmin.net/security/PMASA-2016-10/"
    }
  ],
  "reference": "CERTFR-2016-AVI-077",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2016-03-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Certaines d\u0027entre elles permettent \u00e0\nun attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9,\nune atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-13 du 25 f\u00e9vrier 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-12 du 25 f\u00e9vrier 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-10 du 25 f\u00e9vrier 2016",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2016-11 du 25 f\u00e9vrier 2016",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 4.5.x ant\u00e9rieures \u00e0 4.5.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 4.4.x ant\u00e9rieures \u00e0 4.4.15.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-7873",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-7873"
    }
  ],
  "initial_release_date": "2015-10-23T00:00:00",
  "last_revision_date": "2015-10-23T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2015-5 du 23 octobre    2015",
      "url": "https://www.phpmyadmin.net/security/PMASA-2015-5/"
    }
  ],
  "reference": "CERTFR-2015-AVI-450",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-10-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elle permet \u00e0 un attaquant de\nprovoquer un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2015-5 du 23 octobre 2015",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.3.13.2",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.4.14.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-6830",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-6830"
    }
  ],
  "initial_release_date": "2015-09-16T00:00:00",
  "last_revision_date": "2015-09-16T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2015-4 du 08    septembre 2015",
      "url": "https://www.phpmyadmin.net/security/PMASA-2015-4/"
    }
  ],
  "reference": "CERTFR-2015-AVI-390",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-09-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elle permet \u00e0 un attaquant de\nprovoquer un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2015-4 du 08 septembre 2015",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "PHPMyAdmin versions 4.2.x ant\u00e9rieures \u00e0 4.2.13.3",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "PHPMyAdmin versions 4.3.x ant\u00e9rieures \u00e0 4.3.13.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "PHPMyAdmin versions 4.4.x ant\u00e9rieures \u00e0 4.4.6.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "PHPMyAdmin versions 4.0.x ant\u00e9rieures \u00e0 4.0.10.10",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2015-3902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3902"
    },
    {
      "name": "CVE-2015-3903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-3903"
    }
  ],
  "initial_release_date": "2015-05-15T00:00:00",
  "last_revision_date": "2015-05-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2015-AVI-226",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2015-05-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ePHPMyAdmin\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es, une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es et une injection de requ\u00eates ill\u00e9gitimes par\nrebond (CSRF).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans PHPMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PHPMyAdmin PMASA-2015-2 du 13 mai 2015",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2015-2.php"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PHPMyAdmin PMASA-2015-3 du 13 mai 2015",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2015-3.php"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "versions ant\u00e9rieures \u00e0 phpMyAdmin 4.1.14.8",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "versions ant\u00e9rieures \u00e0 phpMyAdmin 4.0.10.7",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "Versions ant\u00e9rieures \u00e0 phpMyAdmin 4.2.13.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-9219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9219"
    },
    {
      "name": "CVE-2014-9218",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-9218"
    }
  ],
  "initial_release_date": "2014-12-05T00:00:00",
  "last_revision_date": "2014-12-05T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-18 du 03    d\u00e9cembre 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-18.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-17 du 03    d\u00e9cembre 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-17.php"
    }
  ],
  "reference": "CERTFR-2014-AVI-506",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-12-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un d\u00e9ni de service \u00e0 distance et une injection de code\nindirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-17 du 03 d\u00e9cembre 2014",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-18 du 03 d\u00e9cembre 2014",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin branche 4.0.X versions ant\u00e9rieures \u00e0 4.0.10.6",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin branche 4.2.X versions ant\u00e9rieures \u00e0 4.1.12",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin branche 4.1.X versions ant\u00e9rieures \u00e0 4.1.14.7",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-8959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8959"
    },
    {
      "name": "CVE-2014-8961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8961"
    },
    {
      "name": "CVE-2014-8958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8958"
    },
    {
      "name": "CVE-2014-8960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-8960"
    }
  ],
  "initial_release_date": "2014-11-24T00:00:00",
  "last_revision_date": "2014-11-24T00:00:00",
  "links": [],
  "reference": "CERTFR-2014-AVI-494",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-11-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une injection\nde code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2014-15 du 20 novembre 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-15.php"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2014-14 du 20 novembre 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-14.php"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2014-16 du 20 novembre 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-16.php"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2014-13 du 20 novembre 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-13.php"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.0.10.3",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.2.8.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.1.14.4",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-6300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-6300"
    }
  ],
  "initial_release_date": "2014-09-15T00:00:00",
  "last_revision_date": "2014-09-15T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-10 du 13    septembre 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-10.php"
    }
  ],
  "reference": "CERTFR-2014-AVI-386",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-09-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elle permet \u00e0 un attaquant de\nprovoquer une injection de code indirecte \u00e0 distance (XSS) et une\ninjection de requ\u00eates ill\u00e9gitimes par rebond (CSRF).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-10 du 13 septembre 2014",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "versions ant\u00e9rieures \u00e0 phpMyAdmin 4.1.14.3",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "versions ant\u00e9rieures \u00e0 phpMyAdmin 4.2.7.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "Versions ant\u00e9rieures \u00e0 phpMyAdmin 4.0.10.2",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-5273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5273"
    },
    {
      "name": "CVE-2014-5274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-5274"
    }
  ],
  "initial_release_date": "2014-09-03T00:00:00",
  "last_revision_date": "2014-09-03T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-8 du 17 ao\u00fbt    2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-8.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-9 du 17 ao\u00fbt    2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-9.php"
    }
  ],
  "reference": "CERTFR-2014-AVI-371",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-09-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-9 du 17 ao\u00fbt 2014",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-8 du 17 ao\u00fbt 2014",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.2.6",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.1.14.2",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 4.0.10.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-4986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4986"
    },
    {
      "name": "CVE-2014-4954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4954"
    },
    {
      "name": "CVE-2014-4955",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4955"
    },
    {
      "name": "CVE-2014-4987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4987"
    }
  ],
  "initial_release_date": "2014-07-21T00:00:00",
  "last_revision_date": "2014-07-21T00:00:00",
  "links": [],
  "reference": "CERTFR-2014-AVI-330",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-07-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une injection de code indirecte \u00e0 distance (XSS) et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2014-4 du 21 juillet 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-4.php"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2014-6 du 21 juillet 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-6.php"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2014-5 du 21 juillet 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-5.php"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PMASA-2014-7 du 21 juillet 2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-7.php"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 4.1.x ant\u00e9rieures \u00e0 4.1.14.1",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 4.2.x ant\u00e9rieures \u00e0 4.2.4",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2014-4348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4348"
    },
    {
      "name": "CVE-2014-4349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2014-4349"
    }
  ],
  "initial_release_date": "2014-06-23T00:00:00",
  "last_revision_date": "2014-06-23T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-3 du 20 juin    2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-3.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-2 du 20 juin    2014",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2014-2.php"
    }
  ],
  "reference": "CERTFR-2014-AVI-281",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2014-06-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-2 du 20 juin 2014",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2014-3 du 20 juin 2014",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "versions ant\u00e9rieures \u00e0 phpMyAdmin 4.0.4.2",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "Versions ant\u00e9rieures \u00e0 phpMyAdmin 3.5.8.2",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2013-07-29T00:00:00",
  "last_revision_date": "2013-07-29T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-15 du 28 juillet    2013",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2013-15.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-13 du 28 juillet    2013",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2013-13.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-14 du 28 juillet    2013",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2013-14.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-11 du 28 juillet    2013",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2013-11.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-8 du 28 juillet    2013",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2013-8.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-9 du 28 juillet    2013",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2013-9.php"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-12 du 28 juillet    2013",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2013-12.php"
    }
  ],
  "reference": "CERTA-2013-AVI-442",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-07-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une \u00e9l\u00e9vation\nde privil\u00e8ges et une injection de code indirecte \u00e0 distance (XSS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-15 du 28 juillet 2013",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-12 du 28 juillet 2013",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-13 du 28 juillet 2013",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-9 du 28 juillet 2013",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-11 du 28 juillet 2013",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-8 du 28 juillet 2013",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2013-14 du 28 juillet 2013",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "versions ant\u00e9rieures \u00e0 phpMyAdmin 3.4.11.1 pour la branche 3.4.",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "Versions ant\u00e9rieures \u00e0 phpMyAdmin 3.5.2.2 pour la branche 3.5 ;",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-4345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4345"
    }
  ],
  "initial_release_date": "2012-08-20T00:00:00",
  "last_revision_date": "2012-08-20T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2012-4 du 16 ao\u00fbt    2012 :",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2012-4.php"
    }
  ],
  "reference": "CERTA-2012-AVI-449",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-08-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Elle concerne une injection de code\nindirecte \u00e0 distance (XSS) pr\u00e9sente dans de multiples pages et actions\ndu logiciel.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 phpMyAdmin PMASA-2012-4 du 16 ao\u00fbt 2012",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 3.3.0 \u00e0 3.4.3.2.",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans phpMyAdmin. Ces\nvuln\u00e9rabilit\u00e9s permettent l\u0027injection de script dans les pages rendues\npar phpMyAdmin. Une v\u00e9rification imparfaite des noms de table, de\ncolonnes et d\u0027index peuvent mener \u00e0 l\u0027injection de code HTML ou scripts.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-3181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3181"
    }
  ],
  "initial_release_date": "2011-08-26T00:00:00",
  "last_revision_date": "2011-08-26T00:00:00",
  "links": [],
  "reference": "CERTA-2011-AVI-475",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-08-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e. Ces vuln\u00e9rabilit\u00e9s permettent\nl\u0027injection de script dans les pages rendues par \u003cspan\nclass=\"textit\"\u003ephpMyAdmin\u003c/span\u003e.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin versions 3.3.0 \u00e0 3.4.3.2",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Annonce phpMyAdmin PMASA-2011-13",
      "url": "http://phpmyadmin.net/home_page/security/PMASA-2011-13.php"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions 3.4.3.0 et ant\u00e9rieures.",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions 3.3.10.1 et ant\u00e9rieures ;",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans phpMyAdmin :\n\n-   la premi\u00e8re permet de modifier le contenu de certaines variables de\n    session et ce faisant d\u0027ex\u00e9cuter du code arbitraire ;\n-   la seconde concerne un manque de contr\u00f4le sur certaines URL pass\u00e9es\n    au serveur et permet d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance ;\n-   la troisi\u00e8me vuln\u00e9rabilit\u00e9 relative \u00e0 un manque de contr\u00f4le des\n    expressions r\u00e9guli\u00e8res permet de conduire des attaques de type\n    travers\u00e9e de r\u00e9pertoire ;\n-   la derni\u00e8re concerne \u00e9galement un probl\u00e8me de travers\u00e9e de\n    r\u00e9pertoire li\u00e9 \u00e0 la gestion de certains types MIME.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-2508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2508"
    },
    {
      "name": "CVE-2011-2505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2505"
    },
    {
      "name": "CVE-2011-2506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2506"
    },
    {
      "name": "CVE-2011-2507",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2507"
    }
  ],
  "initial_release_date": "2011-07-05T00:00:00",
  "last_revision_date": "2011-07-05T00:00:00",
  "links": [
    {
      "title": "Bulletins de s\u00e9curit\u00e9 phpMyAdmin PMASA-2011-7 du 02 juillet    2011 :",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2011-7.php"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 phpMyAdmin PMASA-2011-6 du 02 juillet    2011 :",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2011-6.php"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 phpMyAdmin PMASA-2011-5 du 02 juillet    2011 :",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2011-5.php"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 phpMyAdmin PMASA-2011-8 du 02 juillet    2011 :",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2011-8.php"
    }
  ],
  "reference": "CERTA-2011-AVI-380",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-07-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans phpMyAdmin permettent \u00e0 un utilisateur\ndistant d\u0027ex\u00e9cuter du code arbitraire, de porter atteinte \u00e0 l\u0027int\u00e9grit\u00e9\nou \u00e0 la confidentialit\u00e9 de certaines donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 phpMyAdmin du 03 juillet 2011",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin 3.3.x.",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin 2.11.x ;",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans la fonction PMA_Bookmark_get de\nphpMyAdmin. Un attaquant authentifi\u00e9 peut utiliser cette vuln\u00e9rabilit\u00e9,\n\u00e0 l\u0027aide d\u0027un marque page sp\u00e9cialement con\u00e7u, pour faire ex\u00e9cuter une\ncommande SQL par un autre utilisateur.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-0987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-0987"
    }
  ],
  "initial_release_date": "2011-02-16T00:00:00",
  "last_revision_date": "2011-02-16T00:00:00",
  "links": [],
  "reference": "CERTA-2011-AVI-091",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-02-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans phpMyAdmin peut \u00eatre utilis\u00e9e pour faire ex\u00e9cuter\nune commande \u003cspan class=\"textit\"\u003eSQL\u003c/span\u003e par un autre utilisateur.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin phpMyAdmin PMASA-2011-2 du 11 f\u00e9vrier 2011",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2011-2.php"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 2.11.11.1 ;",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin versions ant\u00e9rieures \u00e0 3.3.8.1.",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans le script de recherche de la base de donn\u00e9es\npermet une injection de code indirecte \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2010-4329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-4329"
    }
  ],
  "initial_release_date": "2010-12-02T00:00:00",
  "last_revision_date": "2010-12-02T00:00:00",
  "links": [],
  "reference": "CERTA-2010-AVI-572",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-12-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans phpMyAdmin permet une injection de code indirecte\n\u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin phpMyAdmin PMASA-2010-8 du 29 novembre 2010",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2010-8.php"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Branche 2.x de phpMyAdmin : versions inf\u00e9rieures \u00e0 2.11.10.1 ;",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "branche 3.x de phpMyAdmin : versions inf\u00e9rieures \u00e0 3.3.5.1 .",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans phpMyAdmin :\n\n-   une vuln\u00e9rabilit\u00e9 (CVE-2010-3055) permet \u00e0 une personne malveillante\n    d\u0027ins\u00e9rer du code PHP dans un fichier de configuration, via le\n    script d\u0027installation. L\u0027exploitation de cette faille ne peut\n    r\u00e9ussir que si les bonnes pratiques d\u0027installation de phpMyAdmin\n    n\u0027ont pas \u00e9t\u00e9 suivies, et que les scripts d\u0027installation n\u0027ont pas\n    \u00e9t\u00e9 supprim\u00e9s une fois celle-ci termin\u00e9e. Cette faille ne touche que\n    les versions inf\u00e9rieures \u00e0 2.11.10.1 ;\n-   les versions inf\u00e9rieures \u00e0 3.3.5.1 pour la branche 3.x et\n    inf\u00e9rieures \u00e0 2.11.10.1 pour la branche 2.x sont vuln\u00e9rables \u00e0 une\n    attaque de type injection de code indirecte \u00e0 distance sur de\n    nombreuses pages (CVE-2010-3056).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2010-3056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-3056"
    },
    {
      "name": "CVE-2010-3055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-3055"
    }
  ],
  "initial_release_date": "2010-08-23T00:00:00",
  "last_revision_date": "2010-08-23T00:00:00",
  "links": [
    {
      "title": "Notes de s\u00e9curit\u00e9 phpMyAdmin du    20 ao\u00fbt 2010 :",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2010-5.php"
    },
    {
      "title": "Notes de s\u00e9curit\u00e9 phpMyAdmin du    20 ao\u00fbt 2010 :",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2010-4.php"
    }
  ],
  "reference": "CERTA-2010-AVI-397",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-08-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    }
  ],
  "summary": "Des vuln\u00e9rabilit\u00e9s dans \u003cspan class=\"textit\"\u003ephpMyAdmin\u003c/span\u003e\npermettent notamment \u00e0 un attaquant d\u0027inclure du code \u003cspan\nclass=\"textit\"\u003ePHP\u003c/span\u003e dans un fichier de configuration.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Notes de s\u00e9curit\u00e9 phpMyAdmin du 20 ao\u00fbt 2010",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "phpMyAdmin 2.11.x ;",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    },
    {
      "description": "phpMyAdmin 3.x.",
      "product": {
        "name": "phpMyAdmin",
        "vendor": {
          "name": "phpMyAdmin",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans le traitement des noms de tables MySQL peut \u00eatre\nexploit\u00e9e afin d\u0027injecter du code arbitraire qui sera ex\u00e9cut\u00e9 dans le\ncontexte du navigateur Internet d\u0027un utilisateur.\n\nUne autre vuln\u00e9rabilit\u00e9, caus\u00e9e par une erreur dans le traitement des\nentr\u00e9es fournies \u00e0 la fonctionnalit\u00e9 PDF schema generator, peut \u00eatre\nexploit\u00e9e afin d\u0027ex\u00e9cuter des requ\u00eates SQL arbitraires.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2009-3697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3697"
    },
    {
      "name": "CVE-2009-3696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3696"
    }
  ],
  "initial_release_date": "2009-10-16T00:00:00",
  "last_revision_date": "2009-10-16T00:00:00",
  "links": [
    {
      "title": "Annonce de s\u00e9curit\u00e9 phpMyAdmin PMASA-2009-6 du 13 octobre    2009 :",
      "url": "http://www.phpmyadmin.net/home_page/security/PMASA-2009-6.php"
    }
  ],
  "reference": "CERTA-2009-AVI-447",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-10-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de requ\u00eates SQL arbitraires"
    },
    {
      "description": "Injection de code indirecte"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s d\u00e9couvertes dans phpMyAdmin permettent \u00e0 un\nutilisateur distant malintentionn\u00e9 d\u0027ex\u00e9cuter des requ\u00eates SQL (\u003cspan\nclass=\"textit\"\u003eStructured Query Language\u003c/span\u003e) ou de r\u00e9aliser une\ninjection de code indirecte.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans phpMyAdmin",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Annonce de s\u00e9curit\u00e9 phpMyAdmin PMASA-2009-6 du 13 octobre 2009",
      "url": null
    }
  ]
}