ALT-PU-2020-2100: package phpMyAdmin update to version 5.0.2-alt1
Описание
This update upgrades phpMyAdmin to version 5.0.2-alt1.
Устраненные уязвимости3
Ссылки4
GHSA-f4cr-3xmc-2wpm
https://github.com/advisories/GHSA-f4cr-3xmc-2wpmGHSA-fcww-8wvc-38q9
https://github.com/advisories/GHSA-fcww-8wvc-38q9GHSA-h65r-8fp8-w7cx
https://github.com/advisories/GHSA-h65r-8fp8-w7cxСвязанные уязвимости
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a crafted database or table name. The attack can be performed if a user attempts certain search operations on the malicious database or table.
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search actions in libraries/classes/Controllers/Table/TableSearchController.php. An attacker can generate a crafted database or table name. The attack can be performed if a user attempts certain search operations on the malicious database or table.
In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection v ...