Описание
An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 4:4.6.6-5ubuntu0.5 |
| cosmic | ignored | end of life |
| devel | not-affected | 4:5.1.4+dfsg1-1 |
| disco | ignored | end of life |
| eoan | DNE | |
| esm-apps/bionic | released | 4:4.6.6-5ubuntu0.5 |
| esm-apps/focal | not-affected | 4:4.9.5+dfsg1-2 |
| esm-apps/jammy | needed | |
| esm-apps/noble | not-affected | 4:5.1.4+dfsg1-1 |
| esm-apps/xenial | released | 4:4.5.4.1-2ubuntu2.1+esm3 |
Показывать по
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature.
An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability ...
Уязвимость функции конструктора (designer/move.js file) веб-приложения для администрирования систем управления базами данных phpMyAdmin, позволяющая нарушителю выполнить произвольный код
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3