PT-2019-20240 · Mageia · Phpmyadmin

Publicado 2019-01-30 · Atualizado 2019-01-30

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.

Description The issue concerns a possible SQL injection in the Designer feature. When the AllowArbitraryServer configuration is set to true, an attacker can utilize a rogue MySQL server to read any file on the server that the web server's user can access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2019-0057

Produtos afetados

Phpmyadmin

Referências · 5

• https://phpmyadmin.net/security/PMASA-2019-2 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=24238 · Nota
• https://osv.dev/vulnerability/MGASA-2019-0057 · Aviso do Fabricante
• https://phpmyadmin.net/security/PMASA-2019-1 · Nota
• https://advisories.mageia.org/MGASA-2019-0057.html · Nota de Segurança