{"id":"MGASA-2017-0471","aliases":[],"status":"published","title":"Updated phpmyadmin packages fix security vulnerability","description":"Due to an XSRF/CSRF vulnerability in phpMyAdmin before 4.7.7, by\ndeceiving a user to click on a crafted URL, it is possible to perform\nharmful database operations such as deleting records,\ndropping/truncating tables etc (PMASA-2017-9).\n\nThe phpmyadmin package has been updated to version 4.7.7 to fix this\nissue and other bugs.\n\nNote that phpMyAdmin 4.4.x in Mageia 5 is no longer supported.  Users of\nthe phpmyadmin package should upgrade to Mageia 6.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-12-28T13:16:56Z","modified":"2026-04-16T04:27:09Z","fixes":[{"ecosystem":"Mageia:6","package":"phpmyadmin","fixed_in":["4.7.7-1.mga6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:6","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.7-1.mga6"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2017-0471.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22263","tags":["report"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2017-9/","tags":["web"]},{"url":"https://www.phpmyadmin.net/files/4.7.2/","tags":["web"]},{"url":"https://www.phpmyadmin.net/files/4.7.3/","tags":["web"]},{"url":"https://www.phpmyadmin.net/files/4.7.4/","tags":["web"]},{"url":"https://www.phpmyadmin.net/files/4.7.5/","tags":["web"]},{"url":"https://www.phpmyadmin.net/files/4.7.6/","tags":["web"]},{"url":"https://www.phpmyadmin.net/files/4.7.7/","tags":["web"]},{"url":"https://www.phpmyadmin.net/news/2017/12/23/phpmyadmin-477-released/","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2017-0471","title":"Updated phpmyadmin packages fix security vulnerability","description":"Due to an XSRF/CSRF vulnerability in phpMyAdmin before 4.7.7, by\ndeceiving a user to click on a crafted URL, it is possible to perform\nharmful database operations such as deleting records,\ndropping/truncating tables etc (PMASA-2017-9).\n\nThe phpmyadmin package has been updated to version 4.7.7 to fix this\nissue and other bugs.\n\nNote that phpMyAdmin 4.4.x in Mageia 5 is no longer supported.  Users of\nthe phpmyadmin package should upgrade to Mageia 6.\n","status":"published","published":"2017-12-28T13:16:56Z","modified":"2026-04-16T04:27:09.930404Z","updated_at":"2026-11-02T15:49:40.442238Z"}]}}