~ / search / GHSA-jgjc-332c-8cmc

GHSA-jgjc-332c-8cmc

SQL injection in phpMyAdmin

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-18622

Packages

EcosystemPackageAffectedFixed in
Packagist phpmyadmin/phpmyadmin < 4.9.2 4.9.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature.

References

External links from the advisory. They lead to third-party sites.