MGASA-2017-0471
Updated phpmyadmin packages fix security vulnerability
Due to an XSRF/CSRF vulnerability in phpMyAdmin before 4.7.7, by deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc (PMASA-2017-9).
The phpmyadmin package has been updated to version 4.7.7 to fix this issue and other bugs.
Note that phpMyAdmin 4.4.x in Mageia 5 is no longer supported. Users of the phpmyadmin package should upgrade to Mageia 6.
What each source reports
OSV No score
Updated phpmyadmin packages fix security vulnerability
Due to an XSRF/CSRF vulnerability in phpMyAdmin before 4.7.7, by deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc (PMASA-2017-9).
The phpmyadmin package has been updated to version 4.7.7 to fix this issue and other bugs.
Note that phpMyAdmin 4.4.x in Mageia 5 is no longer supported. Users of the phpmyadmin package should upgrade to Mageia 6.
- Record
MGASA-2017-0471- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpmyadminMageia:6 |
before 4.7.7-1.mga6 | 4.7.7-1.mga6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2017-0471 is a vulnerability with no CVSS score yet in phpmyadmin, published December 28, 2017. No source lists public exploit code. Fixed in phpmyadmin 4.7.7-1.mga6.