Published: 05/06/2019 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

An issue exists in phpMyAdmin prior to 4.9.0.1. A vulnerability was reported where a specially crafted database name can be used to trigger an SQL injection attack through the designer feature.

Vulnerable Product	Search on Vulmon	Subscribe to Product
phpmyadmin phpmyadmin

Debian Bug report logs - #930048 phpmyadmin: CVE-2019-11768: PMASA-2019-3 Package: src:phpmyadmin; Maintainer for src:phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 6 Jun 2019 07:24:01 UTC Severity: grave Tags: security, upstream Found in versions ...

Debian Bug report logs - #930017 phpmyadmin: CVE-2019-12616: PMASA-2019-4 Package: src:phpmyadmin; Maintainer for src:phpmyadmin is Thijs Kinkhorst <thijs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 5 Jun 2019 09:30:02 UTC Severity: grave Tags: security, upstream Found in versions ...

CWE-89 https://www.phpmyadmin.net/security/PMASA-2019-3/http://www.securityfocus.com/bid/108617 http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00017.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/II4HC4QO6WUL2IRSQKCB66UBJOLLI5OV/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKJMYVXEDXGEGRO42T6H6VOEZJ65QPQ7/https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930048

CVE-2019-11768

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect