ALT-PU-2014-1591

Критический

ALT-PU-2014-1591: package phpMyAdmin update to version 4.1.14-alt1

Источник

errata.altlinux.org

Дата публикации

05.05.2014

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades phpMyAdmin to version 4.1.14-alt1.

Устраненные уязвимости57

CVE-2014-1879

Низкий 3.5

Дата публикации: 20.02.2014

CWE-79

Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.

CVSS 2.0

Низкий 3.5

AV:N/AC:M/Au:S/C:N/I:P/A:N

Access vector: Network
Complexity: Medium
Authentication: Single
Confidentiality: None
Integrity: Partial
Availability: None

Ссылки

CVE-2014-1879 https://nvd.nist.gov/vuln/detail/CVE-2014-1879

Ссылки33

ALT-PU-2014-1591 https://errata.altlinux.org/ALT-PU-2014-1591

GHSA-2mcj-3r3r-v5wm

https://github.com/advisories/GHSA-2mcj-3r3r-v5wm

GHSA-2p7v-jm8m-g3qq

https://github.com/advisories/GHSA-2p7v-jm8m-g3qq

GHSA-3fgq-cmr4-97rr

https://github.com/advisories/GHSA-3fgq-cmr4-97rr

GHSA-3hw5-fffc-qrg4

https://github.com/advisories/GHSA-3hw5-fffc-qrg4

GHSA-426q-975p-w5cr

https://github.com/advisories/GHSA-426q-975p-w5cr

GHSA-44vv-mm86-7cg6

https://github.com/advisories/GHSA-44vv-mm86-7cg6

GHSA-47qr-f86f-3wm4

https://github.com/advisories/GHSA-47qr-f86f-3wm4

GHSA-567r-vqj7-5cw7

https://github.com/advisories/GHSA-567r-vqj7-5cw7

GHSA-5868-g58j-vrj5

https://github.com/advisories/GHSA-5868-g58j-vrj5

GHSA-5h5m-fj48-qpjw

https://github.com/advisories/GHSA-5h5m-fj48-qpjw

GHSA-6j2v-g9rg-qcm5

https://github.com/advisories/GHSA-6j2v-g9rg-qcm5

GHSA-99xj-xqc9-98hr

https://github.com/advisories/GHSA-99xj-xqc9-98hr

GHSA-9hrc-rwrq-v6mh

https://github.com/advisories/GHSA-9hrc-rwrq-v6mh

GHSA-9rmm-8fp4-26hv

https://github.com/advisories/GHSA-9rmm-8fp4-26hv

GHSA-9xhq-pm7v-693p

https://github.com/advisories/GHSA-9xhq-pm7v-693p

GHSA-cr65-p662-fx5c

https://github.com/advisories/GHSA-cr65-p662-fx5c

GHSA-fcgm-62p3-f7cm

https://github.com/advisories/GHSA-fcgm-62p3-f7cm

GHSA-hmmx-wxh4-9w8w

https://github.com/advisories/GHSA-hmmx-wxh4-9w8w

GHSA-j8mx-x32r-5rf4

https://github.com/advisories/GHSA-j8mx-x32r-5rf4

GHSA-jvxx-8xxf-5495

https://github.com/advisories/GHSA-jvxx-8xxf-5495

GHSA-mhxj-6vf8-mwv3

https://github.com/advisories/GHSA-mhxj-6vf8-mwv3

GHSA-mwm8-36c5-j5cf

https://github.com/advisories/GHSA-mwm8-36c5-j5cf

GHSA-p849-vf5f-f3x7

https://github.com/advisories/GHSA-p849-vf5f-f3x7

GHSA-phhm-63xx-v9rr

https://github.com/advisories/GHSA-phhm-63xx-v9rr

GHSA-qf3f-7x69-qfv3

https://github.com/advisories/GHSA-qf3f-7x69-qfv3

GHSA-r326-mp8g-6xfc

https://github.com/advisories/GHSA-r326-mp8g-6xfc

GHSA-r643-7xfg-ppc5

https://github.com/advisories/GHSA-r643-7xfg-ppc5

GHSA-rh74-5835-jpxp

https://github.com/advisories/GHSA-rh74-5835-jpxp

GHSA-rv57-479x-x4qv

https://github.com/advisories/GHSA-rv57-479x-x4qv

GHSA-rv6m-chvv-wmxg

https://github.com/advisories/GHSA-rv6m-chvv-wmxg

GHSA-wm9c-vcv2-vpqc

https://github.com/advisories/GHSA-wm9c-vcv2-vpqc

GHSA-wpww-hx7x-xfjh

https://github.com/advisories/GHSA-wpww-hx7x-xfjh

Связанные уязвимости

ALT-PU-2016-1527

altlinux

больше 10 лет назад

ALT-PU-2016-1527: package `phpMyAdmin` update to version 4.6.1-alt1

CVE-2014-1879

ubuntu

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.

CVE-2014-1879

nvd

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.

CVE-2014-1879

debian

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin b ...

GHSA-6m6g-jfj8-2gh7

github

больше 4 лет назад

Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action.