Every CVESearch/Get API key

openSUSE-SU-2017:3451-1

Security update for phpMyAdmin

No scoreFix available

This update for phpMyAdmin to version 4.7.7 fixes a security issue and bugs.

The following vulnerability was fixed:

  • By deceiving a user to click on a crafted URL, it was possible to perform harmful database operations (bsc#1074066, PMASA-2017-09)

This update also contains all upstream improvements and bugfixes in version 4.7.7:

  • various display and UI fixes
  • PHP error fixes
  • Improved deteciton of MySQL server needing SSL connections
  • Support JSON datatype on MariaDB 10.2.7 and newer
  • Fix constructing ALTER query with AFTER
  • Fix changing password on MariaDB cluster

What each source reports

OSVNo score

Security update for phpMyAdmin

This update for phpMyAdmin to version 4.7.7 fixes a security issue and bugs.

The following vulnerability was fixed:

  • By deceiving a user to click on a crafted URL, it was possible to perform harmful database operations (bsc#1074066, PMASA-2017-09)

This update also contains all upstream improvements and bugfixes in version 4.7.7:

  • various display and UI fixes
  • PHP error fixes
  • Improved deteciton of MySQL server needing SSL connections
  • Support JSON datatype on MariaDB 10.2.7 and newer
  • Fix constructing ALTER query with AFTER
  • Fix changing password on MariaDB cluster
Record
openSUSE-SU-2017:3451-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
phpMyAdmin
SUSE:Package Hub 12
before 4.7.7-14.1
4.7.7-14.1

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

openSUSE-SU-2017:3451-1 is a vulnerability with no CVSS score yet in phpMyAdmin, published December 29, 2017. No source lists public exploit code. Fixed in phpMyAdmin 4.7.7-14.1.

References

MoveEnter Open