Launchpad.net

CVE 2017-1000015

phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

See the CVE page on Mitre.org for more details.

References