MGASA-2017-0471: phpmyadmin Mageia
Vulnerability summary
MGASA-2017-0471 is a vulnerability in phpmyadmin Mageia with no CVSS score yet.
Timeline
- 28-12-2017PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated phpmyadmin packages fix security vulnerability Due to an XSRF/CSRF vulnerability in phpMyAdmin before 4.7.7, by deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc (PMASA-2017-9). The phpmyadmin package has been updated to version 4.7.7 to fix this issue and other bugs. Note that phpMyAdmin 4.4.x in Mageia 5 is no longer supported. Users of the phpmyadmin package should upgrade to Mageia 6.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia1 product
- phpmyadmin< 4.7.7-1.mga6
1 vendor · 1 product