Lucene search

K
mageiaGentoo FoundationMGASA-2020-0383
HistoryOct 16, 2020 - 6:44 p.m.

Updated phpmyadmin packages fix security vulnerabilities

2020-10-1618:44:59
Gentoo Foundation
advisories.mageia.org
5

0.008 Low

EPSS

Percentile

82.0%

A vulnerability was discovered where an attacker can cause an XSS attack through the transformation feature. If an attacker sends a crafted link to the victim with the malicious JavaScript, when the victim clicks on the link, the JavaScript will run and complete the instructions made by the attacker. (CVE-2020-26934) An SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query. (CVE-2020-26935)

OSVersionArchitecturePackageVersionFilename
Mageia7noarchphpmyadmin< 4.9.6-1phpmyadmin-4.9.6-1.mga7