PT-2019-12893 · Phpmyadmin+4 · Phpmyadmin+4
Mauro Tempesta
·
Publicado
2019-06-05
·
Atualizado
2024-06-15
·
CVE-2019-12616
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
phpMyAdmin versions prior to 4.9.0
Description
A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken ![]()
tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) to the victim.
Recommendations
For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the issue. As a temporary workaround, consider implementing additional CSRF protection measures to minimize the risk of exploitation. Restrict access to the phpMyAdmin database to minimize the risk of an attacker delivering a malicious payload.
Exploit
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Suse
Ubuntu
Phpmyadmin