CVE-2016-5731 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2016-5731

Modified

More Info Official Page

Source-cve@mitre.org

Published At-03 Jul, 2016 | 01:59

Updated At-06 May, 2026 | 22:30

Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.1	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 3.0

Base score: 6.1

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

>>phpmyadmin>>4.6.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*

>>phpmyadmin>>4.6.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*

>>phpmyadmin>>4.6.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*

>>phpmyadmin>>4.6.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*

>>phpmyadmin>>4.6.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*

>>phpmyadmin>>4.6.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.0:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.1:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.2:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.3:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.4.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.1:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.4.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.4.2:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.5:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.6

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.6:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.7

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.7:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.8

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.8:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.9

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.9:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.1:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.2:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.3:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.4:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.5:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.6

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.6:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.7

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.7:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.8

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.8:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.9

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.9:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.10

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.10:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.11

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.11:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.12

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.12:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.13

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.13:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.14

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.14:*:*:*:*:*:*:*

>>phpmyadmin>>4.0.10.15

cpe:2.3:a:phpmyadmin:phpmyadmin:4.0.10.15:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.0:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.1.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.1.1:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.2:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.3

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.3:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.4:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.5:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.6

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.6.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.6.1:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.7

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.7:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.8

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.8:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.9

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.9:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.10

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.10:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.11

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.11:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.12

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.12:*:*:*:*:*:*:*

>>phpmyadmin>>4.4.13

cpe:2.3:a:phpmyadmin:phpmyadmin:4.4.13:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html	cve@mitre.org	N/A
http://www.debian.org/security/2016/dsa-3627	cve@mitre.org	N/A
https://github.com/phpmyadmin/phpmyadmin/commit/418aeea3d83b0b6021bac311d849570acfc6e48c	cve@mitre.org	Patch Vendor Advisory
https://github.com/phpmyadmin/phpmyadmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab	cve@mitre.org	Patch
https://security.gentoo.org/glsa/201701-32	cve@mitre.org	N/A
https://www.phpmyadmin.net/security/PMASA-2016-24/	cve@mitre.org	Patch
http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2016/dsa-3627	af854a3a-2127-422b-91ae-364da2661108	N/A
https://github.com/phpmyadmin/phpmyadmin/commit/418aeea3d83b0b6021bac311d849570acfc6e48c	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://github.com/phpmyadmin/phpmyadmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab	af854a3a-2127-422b-91ae-364da2661108	Patch
https://security.gentoo.org/glsa/201701-32	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.phpmyadmin.net/security/PMASA-2016-24/	af854a3a-2127-422b-91ae-364da2661108	Patch

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2016/dsa-3627

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://github.com/phpmyadmin/phpmyadmin/commit/418aeea3d83b0b6021bac311d849570acfc6e48c

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: https://github.com/phpmyadmin/phpmyadmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab

Source: cve@mitre.org

Resource:

Patch

Hyperlink: https://security.gentoo.org/glsa/201701-32

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www.phpmyadmin.net/security/PMASA-2016-24/

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.debian.org/security/2016/dsa-3627

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://github.com/phpmyadmin/phpmyadmin/commit/418aeea3d83b0b6021bac311d849570acfc6e48c

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://github.com/phpmyadmin/phpmyadmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: https://security.gentoo.org/glsa/201701-32

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://www.phpmyadmin.net/security/PMASA-2016-24/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch