Multiple vulnerabilities have been discovered in phpMyAdmin, the worst of which allows for denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 5.2.0 | >= 5.2.0 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the web.
Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-5.2.0"
Multiple vulnerabilities have been found in phpMyAdmin, allowing remote attackers to conduct XSS.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 4.9.6:4.9.6 | >= 4.9.6:4.9.6 |
phpMyAdmin is a web-based management tool for MySQL databases.
Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.9.6"
An SQL injection vulnerability in phpMyAdmin may allow attackers to execute arbitrary SQL statements.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 4.9.2 | >= 4.9.2 |
phpMyAdmin is a web-based management tool for MySQL databases.
PhpMyAdmin was vulnerable to an SQL injection attack through the designer feature.
An authenticated remote attacker, by specifying a specially crafted database/table name, could trigger an SQL injection attack.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.9.2"
Multiple vulnerabilities have been found in phpMyAdmin, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 4.8.4 | >= 4.8.4 |
phpMyAdmin is a web-based management tool for MySQL databases.
Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details.
Please review the CVE identifiers referenced below for details.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.8.4"
A vulnerability in phpMyAdmin might allow remote attackers to bypass authentication.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 4.0.10.20, < 4.7.0 | >= 4.0.10.20, >= 4.7.0 |
phpMyAdmin is a web-based management tool for MySQL databases.
A vulnerability was discovered where the restrictions caused by “$cfg[‘Servers’][$i][‘AllowNoPassword’] = false” are bypassed under certain PHP versions. This can lead compromised user accounts, who have no passwords set, even if the administrator has set “$cfg[‘Servers’][$i][‘AllowNoPassword’]” to false (which is the default).
This behavior depends on the PHP version used (it seems PHP 5 is affected, while PHP 7.0 is not).
A remote attacker, who only needs to know the username, could bypass security restrictions and access phpMyAdmin.
Set a password for all users.
All phpMyAdmin 4.0.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.0.10.20:4.0.10.20"
All other phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.7.0:4.7.0"
Multiple vulnerabilities have been found in phpMyAdmin, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 4.6.5.1 | >= 4.6.5.1 |
phpMyAdmin is a web-based management tool for MySQL databases.
Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details.
A authenticated remote attacker could exploit these vulnerabilities to execute arbitrary PHP Code, inject SQL code, or to conduct Cross-Site Scripting attacks.
In certain configurations, an unauthenticated remote attacker could cause a Denial of Service condition.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.6.5.1"
Multiple vulnerabilities have been found in phpMyAdmin, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 4.2.13 | >= 4.2.13, >= 4.1.14.7 (revision), >= 4.0.10.6 (revision), >= 4.0.10.15 (revision), >= 4.0.10.16 (revision), >= 4.0.10.17 (revision), >= 4.0.10.18 (revision) |
phpMyAdmin is a web-based management tool for MySQL databases.
Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details.
A remote authenticated attacker could exploit these vulnerabilities to include and execute arbitrary local files via a crafted parameter, inject SQL code, or to conduct Cross-Site Scripting attacks.
There is no known workaround at this time.
All phpMyAdmin 4.2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.2.13"
All phpMyAdmin 4.1 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.1.14.7"
All phpMyAdmin 4.0 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.0.10.6"
Multiple vulnerabilities have been found in phpMyAdmin, allowing remote authenticated attackers to execute arbitrary code, inject SQL code or conduct other attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 4.0.5 | >= 4.0.5 |
phpMyAdmin is a web-based management tool for MySQL databases.
Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details.
A remote authenticated attacker could exploit these vulnerabilities to execute arbitrary code with the privileges of the process running phpMyAdmin, inject SQL code, or to conduct Cross-Site Scripting and Clickjacking attacks.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.0.5"
Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 3.4.9 | >= 3.4.9 |
phpMyAdmin is a web-based management tool for MySQL databases.
Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers and phpMyAdmin Security Advisories referenced below for details.
Remote attackers might be able to insert and execute PHP code, include and execute local PHP files, or perform Cross-Site Scripting (XSS) attacks via various vectors.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-3.4.9"
Multiple errors in phpMyAdmin might allow the remote execution of arbitrary code or a Cross-Site Scripting attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.11.9.5 | >= 2.11.9.5 |
phpMyAdmin is a web-based management tool for MySQL databases.
Multiple vulnerabilities have been reported in phpMyAdmin:
A remote unauthorized attacker could exploit the first vulnerability to execute arbitrary code with the privileges of the user running phpMyAdmin and conduct Cross-Site Scripting attacks using the second vulnerability.
Removing the "scripts/setup.php" file protects you from CVE-2009-1151.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.11.9.5"
Multiple vulnerabilities have been discovered in phpMyAdmin, the worst of which may allow for remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.11.9.4 | >= 2.11.9.4 |
phpMyAdmin is a web-based management tool for MySQL databases.
Multiple vulnerabilities have been reported in phpMyAdmin:
A remote attacker may execute arbitrary code with the rights of the webserver, inject and execute SQL with the rights of phpMyAdmin or conduct XSS attacks against other users.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.11.9.4"
A vulnerability in phpMyAdmin may lead to information disclosure.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.11.5.2 | >= 2.11.5.2 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser.
Cezary Tomczak reported that an undefined UploadDir variable exposes an information disclosure vulnerability when running on shared hosts.
A remote attacker with CREATE TABLE permissions can exploit this vulnerability via a specially crafted HTTP POST request in order to read arbitrary files.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.11.5.2"
A SQL injection vulnerability has been discovered in phpMyAdmin.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.11.5 | >= 2.11.5 |
phpMyAdmin is a free web-based database administration tool.
Richard Cunningham reported that phpMyAdmin uses the $_REQUEST variable of $_GET and $_POST as a source for its parameters.
An attacker could entice a user to visit a malicious web application that sets an "sql_query" cookie and is hosted on the same domain as phpMyAdmin, and thereby conduct SQL injection attacks with the privileges of the user authenticating in phpMyAdmin afterwards.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.11.5"
Multiple flaws in phpMyAdmin may lead to several XSS issues and local and remote file inclusion vulnerabilities.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.7.0_p1 | >= 2.7.0_p1 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the web.
Stefan Esser from Hardened-PHP reported about multiple vulnerabilties found in phpMyAdmin. The $GLOBALS variable allows modifying the global variable import_blacklist to open phpMyAdmin to local and remote file inclusion, depending on your PHP version (CVE-2005-4079, PMASA-2005-9). Furthermore, it is also possible to conduct an XSS attack via the $HTTP_HOST variable and a local and remote file inclusion because the contents of the variable are under total control of the attacker (CVE-2005-3665, PMASA-2005-8).
A remote attacker may exploit these vulnerabilities by sending malicious requests, causing the execution of arbitrary code with the rights of the user running the web server. The cross-site scripting issues allow a remote attacker to inject and execute malicious script code or to steal cookie-based authentication credentials, potentially allowing unauthorized access to phpMyAdmin.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.7.0_p1"
phpMyAdmin contains a local file inclusion vulnerability that may lead to the execution of arbitrary code, along with several cross-site scripting issues.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.6.4_p3 | >= 2.6.4_p3 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the web.
Stefan Esser discovered that by calling certain PHP files directly, it was possible to workaround the grab_globals.lib.php security model and overwrite the $cfg configuration array. Systems running PHP in safe mode are not affected. Futhermore, Tobias Klein reported several cross-site-scripting issues resulting from insufficient user input sanitizing.
A local attacker may exploit this vulnerability by sending malicious requests, causing the execution of arbitrary code with the rights of the user running the web server. Furthermore, the cross-site scripting issues give a remote attacker the ability to inject and execute malicious script code or to steal cookie-based authentication credentials, potentially compromising the victim's browser.
There is no known workaround for all those issues at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.6.4_p3"
phpMyAdmin contains a local file inclusion vulnerability that may lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.6.4_p2 | >= 2.6.4_p2 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the web.
Maksymilian Arciemowicz reported that in libraries/grab_globals.lib.php, the $__redirect parameter was not correctly validated. Systems running PHP in safe mode are not affected.
A local attacker may exploit this vulnerability by sending malicious requests, causing the execution of arbitrary code with the rights of the user running the web server.
Run PHP in safe mode.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.6.4_p2"
phpMyAdmin leaves the SQL install script with insecure permissions, potentially leading to a database compromise.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.6.2-r1 | >= 2.6.2-r1 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. phpMyAdmin uses a pma MySQL user to control the linked-tables infrastructure. The SQL install script sets the initial password for the pma user.
The phpMyAdmin installation process leaves the SQL install script with insecure permissions.
A local attacker could exploit this vulnerability to obtain the initial phpMyAdmin password and from there obtain information about databases accessible by phpMyAdmin.
Change the password for the phpMyAdmin MySQL user (pma):
mysql -u root -p
SET PASSWORD FOR 'pma'@'localhost' = PASSWORD('MyNewPassword');
Update your phpMyAdmin config.inc.php:
$cfg['Servers'][$i]['controlpass'] = 'MyNewPassword';
All phpMyAdmin users should change password for the pma user as described above and upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.6.2-r1"
phpMyAdmin is vulnerable to a cross-site scripting attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.6.2_rc1 | >= 2.6.2_rc1 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser.
Oriol Torrent Santiago has discovered that phpMyAdmin fails to validate input to the "convcharset" variable, rendering it vulnerable to cross-site scripting attacks.
By sending a specially-crafted request, an attacker can inject and execute malicious script code, potentially compromising the victim's browser.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.6.2_rc1"
phpMyAdmin contains multiple vulnerabilities that could lead to command execution, XSS issues and bypass of security restrictions.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.6.1_p2-r1 | >= 2.6.1_p2-r1 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser.
phpMyAdmin contains several security issues:
By sending a specially-crafted request, an attacker can include and execute arbitrary PHP code or cause path information disclosure. Furthermore the XSS issue allows an attacker to inject malicious script code, potentially compromising the victim's browser. Lastly the improper escaping of special characters results in unintended privilege settings for MySQL.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.6.1_p2-r1"
phpMyAdmin contains multiple vulnerabilities which could lead to file disclosure or command execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.6.1_rc1 | >= 2.6.1_rc1 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser.
Nicolas Gregoire (exaprobe.com) has discovered two vulnerabilities that exist only on a webserver where PHP safe_mode is off. These vulnerabilities could lead to command execution or file disclosure.
On a system where external MIME-based transformations are enabled, an attacker can insert offensive values in MySQL, which would start a shell when the data is browsed. On a system where the UploadDir is enabled, read_dump.php could use the unsanitized sql_localfile variable to disclose a file.
You can temporarily enable PHP safe_mode or disable external MIME-based transformation AND disable the UploadDir. But instead, we strongly advise to update your version to 2.6.1_rc1.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.6.1_rc1"
phpMyAdmin is vulnerable to cross-site scripting attacks.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.6.0_p3 | >= 2.6.0_p3 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser.
Cedric Cochin has discovered multiple cross-site scripting vulnerabilities in phpMyAdmin. These vulnerabilities can be exploited through the PmaAbsoluteUri parameter, the zero_rows parameter in read_dump.php, the confirm form, or an error message generated by the internal phpMyAdmin parser.
By sending a specially-crafted request, an attacker can inject and execute malicious script code, potentially compromising the victim's browser.
There is no known workaround at this time.
All phpMyAdmin users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-2.6.0_p3"
A vulnerability has been found in the MIME-based transformation system of phpMyAdmin, which may allow remote execution of arbitrary commands if PHP's "safe mode" is disabled.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | < 2.6.0_p2 | >= 2.6.0_p2 |
phpMyAdmin is a popular web-based MySQL administration tool written in PHP. It allows users to browse and administer a MySQL database from a web-browser. Transformations are a phpMyAdmin feature allowing plug-ins to rewrite the contents of any column seen in phpMyAdmin's Browsing mode, including using insertion of PHP or JavaScript code.
A defect was found in phpMyAdmin's MIME-based transformation system, when used with "external" transformations.
A remote attacker could exploit this vulnerability to execute arbitrary commands on the server with the rights of the HTTP server user.
Enabling PHP safe mode ("safe_mode = On" in php.ini) may serve as a temporary workaround.
All phpMyAdmin users should upgrade to the latest version:
# emerge sync # emerge -pv ">=dev-db/phpmyadmin-2.6.0_p2" # emerge ">=dev-db/phpmyadmin-2.6.0_p2"
Multiple vulnerabilities in phpMyAdmin may allow a remote attacker with a valid user account to alter configuration variables and execute arbitrary PHP code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | <= 2.5.7 | >= 2.5.7_p1 |
phpMyAdmin is a popular, web-based MySQL administration tool written in PHP. It allows users to administer a MySQL database from a web-browser.
Two serious vulnerabilities exist in phpMyAdmin. The first allows any user to alter the server configuration variables (including host, name, and password) by appending new settings to the array variables that hold the configuration in a GET statement. The second allows users to include arbitrary PHP code to be executed within an eval() statement in table name configuration settings. This second vulnerability is only exploitable if $cfg['LeftFrameLight'] is set to FALSE.
Authenticated users can alter configuration variables for their running copy of phpMyAdmin. The impact of this should be minimal. However, the second vulnerability would allow an authenticated user to execute arbitrary PHP code with the permissions of the webserver, potentially allowing a serious Denial of Service or further remote compromise.
The second, more serious vulnerability is only exploitable if $cfg['LeftFrameLight'] is set to FALSE. In the default Gentoo installation, this is set to TRUE. There is no known workaround for the first.
All phpMyAdmin users should upgrade to the latest version:
# emerge sync # emerge -pv ">=dev-db/phpmyadmin-2.5.7_p1" # emerge ">=dev-db/phpmyadmin-2.5.7_p1"
A vulnerability in phpMyAdmin which was not properly verifying user generated input could lead to a directory traversal attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/phpmyadmin | * | <= 2.5.5_p1 | >= 2.5.6_rc1 |
phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databased over the Web.
One component of the phpMyAdmin software package (export.php) does not properly verify input that is passed to it from a remote user. Since the input is used to include other files, it is possible to launch a directory traversal attack.
Private information could be gleaned from the remote server if an attacker uses a malformed URL such as http://phpmyadmin.example.com/export.php?what=../../../[existing_file]
In this scenario, the script does not sanitize the "what" argument passed to it, allowing directory traversal attacks to take place, disclosing the contents of files if the file is readable as the web-server user.
The workaround is to either patch the export.php file using the referenced CVS patch or upgrade the software via Portage.
Users are encouraged to upgrade to phpMyAdmin-2.5.6_rc1:
# emerge sync # emerge -pv ">=dev-db/phpmyadmin-2.5.6_rc1" # emerge ">=dev-db/phpmyadmin-2.5.6_rc1" # emerge clean