Lucene search

K
mageiaGentoo FoundationMGASA-2020-0033
HistoryJan 12, 2020 - 2:52 a.m.

Updated phpmyadmin packages fix security vulnerability

2020-01-1202:52:04
Gentoo Foundation
advisories.mageia.org
13

0.003 Low

EPSS

Percentile

70.7%

Updated phpmyadmin package fix security vulnerability: A SQL injection flaw has been discovered in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server (CVE-2020-5504).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchphpmyadmin< 4.9.4-1phpmyadmin-4.9.4-1.mga7