MGASA-2019-0057
Updated phpmyadmin packages fix security vulnerabilities
No scoreFix available
- Possible SQL injection in Designer feature
- When AllowArbitraryServer configuration set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access.
What each source reports
OSV No score
Updated phpmyadmin packages fix security vulnerabilities
- Possible SQL injection in Designer feature
- When AllowArbitraryServer configuration set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access.
- Record
MGASA-2019-0057- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpmyadminMageia:6 |
before 4.7.8-4.mga6 | 4.7.8-4.mga6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2019-0057 is a vulnerability with no CVSS score yet in phpmyadmin, published January 30, 2019. No source lists public exploit code. Fixed in phpmyadmin 4.7.8-4.mga6.