PT-2017-19455 · Phpmyadmin · Phpmyadmin

Publicado 2017-12-28 · Atualizado 2017-12-28

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.7.7

Description The issue allows an attacker to perform harmful database operations, such as deleting records or dropping/truncating tables, by deceiving a user into clicking on a crafted URL. This is due to an XSRF/CSRF vulnerability.

Recommendations For versions prior to 4.7.7, update to version 4.7.7 or later to fix the issue. Users of phpMyAdmin 4.4.x in Mageia 5 should upgrade to Mageia 6.

Identificadores relacionados

MGASA-2017-0471

Produtos afetados

Phpmyadmin

Referências · 11

• https://phpmyadmin.net/files/4.7.4 · Nota
• https://phpmyadmin.net/files/4.7.3 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=22263 · Nota
• https://advisories.mageia.org/MGASA-2017-0471.html · Nota de Segurança
• https://phpmyadmin.net/files/4.7.7 · Nota
• https://phpmyadmin.net/security/PMASA-2017-9 · Nota
• https://phpmyadmin.net/files/4.7.2 · Nota
• https://osv.dev/vulnerability/MGASA-2017-0471 · Aviso do Fabricante
• https://phpmyadmin.net/files/4.7.5 · Nota
• https://phpmyadmin.net/news/2017/12/23/phpmyadmin-477-released · Nota
• https://phpmyadmin.net/files/4.7.6 · Nota