Updated phpmyadmin package fixes security vulnerability

2014-10-2317:27:57

Gentoo Foundation

advisories.mageia.org

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

56.3%

JSON

In phpMyAdmin before 4.1.14.6, with a crafted database or table name it is possible to trigger an XSS in SQL debug output when enabled and in server monitor page when viewing and analysing executed queries (CVE-2014-8326).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchphpmyadmin< 4.1.14.6-1phpmyadmin-4.1.14.6-1.mga3
Mageia4noarchphpmyadmin< 4.1.14.6-1phpmyadmin-4.1.14.6-1.mga4