PT-2019-15539 · Php+2 · Phpmyadmin+2

William Desportes · Publicado 2019-11-22 · Atualizado 2024-06-15 · CVE-2019-18622

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.9.2

Description A SQL injection attack can be triggered through the designer feature by using a crafted database or table name.

Recommendations For versions prior to 4.9.2, update to version 4.9.2 or later to resolve the issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

ALT-PU-2019-3177

ALT-PU-2020-3212

ALT-PU-2021-3657

CVE-2019-18622

GHSA-JGJC-332C-8CMC

MGASA-2019-0357

OPENSUSE-SU-2019:2599-1

OPENSUSE-SU-2019_2599-1

OPENSUSE-SU-2020:0056-1

OPENSUSE-SU-2024:11171-1

Produtos afetados

Alt Linux

Suse

Phpmyadmin

Referências · 82

• https://github.com/phpmyadmin/composer/commit/51acbf53564d9b52e78509a5688ec2b68976b5f7 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18622 · Nota de Segurança
• https://security.gentoo.org/glsa/202003-39 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.html · Aviso do Fabricante
• https://bugzilla.suse.com/1160456 · Nota
• https://suse.com/security/cve/CVE-2017-1000499 · Nota
• https://suse.com/security/cve/CVE-2006-1804 · Nota
• https://errata.altlinux.org/ALT-PU-2021-3657 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2019-3177 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/BA4DGF7KTQS6WA2DRNJSW66L43WB7LRV · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-10188 · Nota
• https://suse.com/security/cve/CVE-2015-8980 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-18622 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-12922 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=25725 · Nota