CVE-2018-19970
CVE-2018-19970
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.
CVSS 6.1 · Medium · EPSS 2.2% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
phpmyadmin Debian:12
- Affected ranges
- ECOSYSTEM: < 4:4.9.1+dfsg1-2
Update to 4:4.9.1+dfsg1-2
phpmyadmin Debian:13
- Affected ranges
- ECOSYSTEM: < 4:4.9.1+dfsg1-2
Update to 4:4.9.1+dfsg1-2
phpmyadmin Debian:14
- Affected ranges
- ECOSYSTEM: < 4:4.9.1+dfsg1-2
Update to 4:4.9.1+dfsg1-2
phpmyadmin/phpmyadmin Packagist
- Versions
- 4.0.0
- 4.0.1
- 4.0.10
- 4.0.10.1
- 4.0.10.2
- 4.0.10.3
- 4.0.10.4
- 4.0.10.5
- 4.0.10.6
- 4.0.10.7
- 4.0.10.8
- 4.0.10.9
- 4.0.2
- 4.0.3
- 4.0.4
- 4.0.4.1
- 4.0.4.2
- 4.0.5
- 4.0.6
- 4.0.7
- 4.0.8
- 4.0.9
- 4.7.0
- 4.7.1
- 4.7.2
- 4.7.3
- 4.7.4
- 4.7.5
- 4.7.6
- 4.7.7
- 4.7.8
- 4.7.9
- 4.8.0
- 4.8.0.1
- 4.8.1
- 4.8.2
- 4.8.3
- Affected ranges
- ECOSYSTEM: ≥ 4.0, < 4.8.4
Update to 4.8.4
phpmyadmin Ubuntu:Pro:14.04:LTS
- Versions
- 4:4.0.6-1
- 4:4.0.8-1
- 4:4.0.9-1
- 4:4.0.10-1
- 4:4.0.10-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: < 4:4.0.10-1ubuntu0.1+esm1
Update to 4:4.0.10-1ubuntu0.1+esm1
phpmyadmin Ubuntu:Pro:16.04:LTS
- Versions
- 4:4.4.13.1-1
- 4:4.5.0.2-2
- 4:4.5.1-1
- 4:4.5.1-2
- 4:4.5.1-3
- 4:4.5.2-1
- 4:4.5.2-2
- 4:4.5.3.1-1
- 4:4.5.4-1
- 4:4.5.4.1-2
- 4:4.5.4.1-2ubuntu1
- 4:4.5.4.1-2ubuntu2
- 4:4.5.4.1-2ubuntu2.1
- 4:4.5.4.1-2ubuntu2.1+esm2
- Affected ranges
- ECOSYSTEM: < 4:4.5.4.1-2ubuntu2.1+esm3
Update to 4:4.5.4.1-2ubuntu2.1+esm3
phpmyadmin Ubuntu:18.04:LTS
- Versions
- 4:4.6.6-5
- Affected ranges
- ECOSYSTEM: < 4:4.6.6-5ubuntu0.5
Update to 4:4.6.6-5ubuntu0.5