Evil-DB LogoEvil-DB
← All CVEs

CVE-2015-6830

medium · 5

libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha.

5
CVSS
10.4%
EPSS (exploit prob.)
96th
EPSS percentile
2015-09-14
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200

Affected products

VendorProductAffected versions
phpmyadminphpmyadmin4.3.0
phpmyadminphpmyadmin4.3.1
phpmyadminphpmyadmin4.3.2
phpmyadminphpmyadmin4.3.3
phpmyadminphpmyadmin4.3.4
phpmyadminphpmyadmin4.3.5
phpmyadminphpmyadmin4.3.6
phpmyadminphpmyadmin4.3.7
phpmyadminphpmyadmin4.3.8
phpmyadminphpmyadmin4.3.9
phpmyadminphpmyadmin4.3.10
phpmyadminphpmyadmin4.3.11
phpmyadminphpmyadmin4.3.12
phpmyadminphpmyadmin4.3.13.1
phpmyadminphpmyadmin4.4.0
phpmyadminphpmyadmin4.4.1
phpmyadminphpmyadmin4.4.1.1
phpmyadminphpmyadmin4.4.3
phpmyadminphpmyadmin4.4.4
phpmyadminphpmyadmin4.4.5
phpmyadminphpmyadmin4.4.6
phpmyadminphpmyadmin4.4.6.1
phpmyadminphpmyadmin4.4.7
phpmyadminphpmyadmin4.4.8
phpmyadminphpmyadmin4.4.9
phpmyadminphpmyadmin4.4.10
phpmyadminphpmyadmin4.4.11
phpmyadminphpmyadmin4.4.12
phpmyadminphpmyadmin4.4.13
phpmyadminphpmyadmin4.4.13.1
phpmyadminphpmyadmin4.4.14

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-6830