vulnerability
phpMyAdmin: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVE-2019-11768)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | 2019-06-05 | 2019-10-16 | 2024-11-27 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
2019-06-05
Added
2019-10-16
Modified
2024-11-27
Description
An issue was discovered in phpMyAdmin before 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature.
Solution
phpmyadmin-upgrade-4_9_0_1
References
- CVE-2019-11768
- https://attackerkb.com/topics/CVE-2019-11768
- URL-http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00005.html
- URL-http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00017.html
- URL-http://www.securityfocus.com/bid/108617
- URL-https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/II4HC4QO6WUL2IRSQKCB66UBJOLLI5OV/
- URL-https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKJMYVXEDXGEGRO42T6H6VOEZJ65QPQ7/
- URL-https://www.phpmyadmin.net/security/PMASA-2019-3/
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.