OPENSUSE-SU-2019:1689-1: phpMyAdmin&distro=openSUSE Leap 15.0

CVSS: UnknownPublished
Published 02-07-2019Last modified 04-02-2026
Open JSON

Vulnerability summary

OPENSUSE-SU-2019:1689-1 is a vulnerability in phpMyAdmin&distro=openSUSE Leap 15.0 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2019-11768CVE-2019-12616

Timeline

  1. 02-07-2019
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for phpMyAdmin This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.0.1: * Several issues with SYSTEM VERSIONING tables * Fixed json encode error in export * Fixed JavaScript events not activating on input (sql bookmark issue) * Show Designer combo boxes when adding a constraint * Fix edit view * Fixed invalid default value for bit field * Fix several errors relating to GIS data types * Fixed javascript error PMA_messages is not defined * Fixed import XML data with leading zeros * Fixed php notice, added support for 'DELETE HISTORY' table privilege (MariaDB >= 10.3.4) * Fixed MySQL 8.0.0 issues with GIS display * Fixed 'Server charset' in 'Database server' tab showing wrong information * Fixed can not copy user on Percona Server 5.7 * Updated sql-parser to version 4.3.2, which fixes several parsing and linting problems - boo#1137497 / PMASA-2019-4 / CVE-2019-12616 / CWE-661: Fixed CSRF vulnerability in login form https://www.phpmyadmin.net/security/PMASA-2019-4/ - boo#1137496 / PMASA-2019-3 / CVE-2019-11768 / CWE-661: Fixed SQL injection in Designer feature https://www.phpmyadmin.net/security/PMASA-2019-3/

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Opensuse2 products
  • phpMyAdmin&distro=openSUSE Leap 15.0< 4.9.0.1-bp150.31.1
  • phpMyAdmin&distro=openSUSE Leap 15.1< 4.9.0.1-bp150.31.1
Suse2 products
  • phpMyAdmin&distro=SUSE Package Hub 12< 4.9.0.1-bp150.31.1
  • phpMyAdmin&distro=SUSE Package Hub 15< 4.9.0.1-bp150.31.1

2 vendors · 4 products

References

5 links