CVE-2018-19969 | BDVDB-2026-110390 Detail

Description#

phpMyAdmin 4.7.x and 4.8.x versions prior to 4.8.4 are affected by a series of CSRF flaws. By deceiving a user into clicking on a crafted URL, it is possible to perform harmful SQL operations such as renaming databases, creating new tables/routines, deleting designer pages, adding/deleting users, updating user passwords, killing SQL processes, etc.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/106175
https://www.phpmyadmin.net/security/PMASA-2018-7/
https://security.gentoo.org/glsa/201904-16

Exploit#

No public exploit known

History#

Version 12018-12-11Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.