{"id":"MGASA-2019-0057","aliases":[],"status":"published","title":"Updated phpmyadmin packages fix security vulnerabilities","description":"- Possible SQL injection in Designer feature\n- When AllowArbitraryServer configuration set to true, with the use of a\nrogue MySQL server, an attacker can read any file on the server that the\nweb server's user can access.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-01-30T19:39:18Z","modified":"2026-04-16T04:26:33Z","fixes":[{"ecosystem":"Mageia:6","package":"phpmyadmin","fixed_in":["4.7.8-4.mga6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:6","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.8-4.mga6"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2019-0057.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24238","tags":["report"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2019-1/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2019-2/","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2019-0057","title":"Updated phpmyadmin packages fix security vulnerabilities","description":"- Possible SQL injection in Designer feature\n- When AllowArbitraryServer configuration set to true, with the use of a\nrogue MySQL server, an attacker can read any file on the server that the\nweb server's user can access.\n","status":"published","published":"2019-01-30T19:39:18Z","modified":"2026-04-16T04:26:33.133761Z","updated_at":"2026-11-02T15:49:40.793816Z"}]}}