~ / search / GHSA-f9hx-5jq4-fgjm

GHSA-f9hx-5jq4-fgjm

phpMyAdmin CSRF Vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2017-1000499

Packages

EcosystemPackageAffectedFixed in
Packagist phpmyadmin/phpmyadmin >= 4.7, < 4.7.7 4.7.7

Details

As written in the advisory (Markdown source, shown as plain text).

phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.

References

External links from the advisory. They lead to third-party sites.