An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) to the victim.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade phpmyadmin | Aug 22, 2024 | Jun 5, 2019 |
| Debian | — | Upgrade phpmyadmin | Jun 18, 2019 | Jun 5, 2019 |
| Freebsd | — | Upgrade phpMyAdmin-php56Upgrade phpMyAdmin-php72Upgrade phpMyAdminUpgrade phpMyAdmin-php70Upgrade phpMyAdmin-php71 | Jun 14, 2019 | Jun 13, 2019 |
| Phpmyadmin | — | Upgrade phpMyAdmin to the latest version | Oct 16, 2019 | Jun 5, 2019 |
| Suse | — | Upgrade phpmyadmin | Jul 3, 2019 | Jun 5, 2019 |
| Ubuntu | — | Upgrade phpmyadminUpgrade phpmyadmin (Ubuntu Pro) | Nov 20, 2020 | Jun 5, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub