Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-1600

Критический

ALT-PU-2023-1600: package phpMyAdmin update to version 5.2.1-alt1

Источник
errata.altlinux.org
Дата публикации
10.04.2023
Дата обновления
04.02.2026
Устраненные уязвимости
3

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades phpMyAdmin to version 5.2.1-alt1.

Устраненные уязвимости3

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 4 года назад

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

CVSS3: 9.8
nvd
почти 4 года назад

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl_storage_engine or tbl_collation parameters to tbl_create.php.

CVSS3: 9.8
debian
почти 4 года назад

SQL Injection vulnerability in function getTableCreationQuery in Creat ...

CVSS3: 5.4
ubuntu
больше 3 лет назад

In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.

CVSS3: 5.4
nvd
больше 3 лет назад

In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.