MGASA-2019-0200: phpmyadmin Mageia

Vulnerability summary

MGASA-2019-0200 is a vulnerability in phpmyadmin Mageia with no CVSS score yet.

Timeline

1. 21-06-2019
   PublishedVulnerability first disclosed.
2. 16-04-2026
   Last modifiedVulnerability information updated.

Description

Updated phpmyadmin packages fix security vulnerabilities Updated phpmyadmin packages fix security vulnerabilities: A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature. (CVE-2019-11768, PMASA-2019-3) A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) through the victim. (CVE-2019-12616, PMASA-2019-4)

No weakness data has been published for this record.