PT-2017-19455 · Phpmyadmin · Phpmyadmin

Published 2017-12-28 · Updated 2017-12-28

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.7.7

Description The issue allows an attacker to perform harmful database operations, such as deleting records or dropping/truncating tables, by deceiving a user into clicking on a crafted URL. This is due to an XSRF/CSRF vulnerability.

Recommendations For versions prior to 4.7.7, update to version 4.7.7 or later to fix the issue. Users of phpMyAdmin 4.4.x in Mageia 5 should upgrade to Mageia 6.

Related Identifiers

MGASA-2017-0471

Affected Products

Phpmyadmin

References · 11

• https://advisories.mageia.org/MGASA-2017-0471.html · Security Note
• https://osv.dev/vulnerability/MGASA-2017-0471 · Vendor Advisory
• https://phpmyadmin.net/files/4.7.4 · Note
• https://phpmyadmin.net/files/4.7.3 · Note
• https://bugs.mageia.org/show_bug.cgi?id=22263 · Note
• https://phpmyadmin.net/files/4.7.7 · Note
• https://phpmyadmin.net/security/PMASA-2017-9 · Note
• https://phpmyadmin.net/files/4.7.2 · Note
• https://phpmyadmin.net/files/4.7.5 · Note
• https://phpmyadmin.net/news/2017/12/23/phpmyadmin-477-released · Note
• https://phpmyadmin.net/files/4.7.6 · Note