CVE-2018-19970

4.3

MEDIUMCVSS v2

Published

December 11, 2018

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.

phpmyadmin/phpmyadmin

GitHubA web interface for MySQL and MariaDB

>= 4.0.0, < 4.8.4NVD

phpmyadmin

Python Package IndexPhpmyadmin docker server

>= 4.0.0, < 4.8.4NVD

phpmyadmin

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

phpMyAdmin is a free software tool written in PHP, intended to handle the administration of MySQL over the Web.

>= 4.0.0, < 4.8.4NVD

eendroroy-io/phpmyadmin

GitHubsimple commandline tool to manage phpmyadmin docker image

>= 4.0.0, < 4.8.4NVD

phpmyadmin/phpmyadmin

PackagistA web interface for MySQL and MariaDB

>= 4.0.0, < 4.8.4NVD

phpmyadmin/phpmyadmin

Docker HubA web interface for MySQL and MariaDB.

>= 4.0.0, < 4.8.4NVD

eendro-roy/phpmyadmin

GitHubsimple commandline tool to manage phpmyadmin docker image

>= 4.0.0, < 4.8.4NVD

Security Advisories

CVE-2018-19970

Description

More on this CVE