CVE-2019-18622
Fixed in a distro release EPSS 2%
An issue was discovered in phpMyAdmin before 4.9.2. A crafted database/table name can be used to trigger a SQL injection attack through the designer feature.
Products: phpmyadmin, opensuse backports_sle, fedoraproject fedora, opensuse leap
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | phpmyadmin/phpmyadmin | 4.9.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | phpmyadmin | 4:4.9.2+dfsg1-1 |
| Debian 13 | phpmyadmin | 4:4.9.2+dfsg1-1 |
| Debian 14 | phpmyadmin | 4:4.9.2+dfsg1-1 |
| SUSE Package Hub 12 | phpMyAdmin | 4.9.4-bp151.3.12.1 |
| SUSE Package Hub 12 | phpMyAdmin | 4.9.2-bp151.3.9.1 |
| SUSE Package Hub 15 | phpMyAdmin | 4.9.4-bp151.3.12.1 |
| SUSE Package Hub 15 | phpMyAdmin | 4.9.2-bp151.3.9.1 |
| SUSE Package Hub 15 SP1 | phpMyAdmin | 4.9.2-bp151.3.9.1 |
| SUSE Package Hub 15 SP1 | phpMyAdmin | 4.9.4-bp151.3.12.1 |
| openSUSE Leap 15.0 | phpMyAdmin | 4.9.2-bp151.3.9.1 |
| openSUSE Leap 15.1 | phpMyAdmin | 4.9.2-bp151.3.9.1 |
| openSUSE Leap 15.1 | phpMyAdmin | 4.9.4-bp151.3.12.1 |
| openSUSE Tumbleweed | phpMyAdmin | 5.1.1-1.2 |