Updated phpmyadmin package fixes security vulnerability

2014-10-2317:27:57

Gentoo Foundation

advisories.mageia.org

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.9%

JSON

In phpMyAdmin before 4.1.14.6, with a crafted database or table name it is possible to trigger an XSS in SQL debug output when enabled and in server monitor page when viewing and analysing executed queries (CVE-2014-8326).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchphpmyadmin< 4.1.14.6-1phpmyadmin-4.1.14.6-1.mga3
Mageia4noarchphpmyadmin< 4.1.14.6-1phpmyadmin-4.1.14.6-1.mga4