[ GLSA 202003-39 ] phpMyAdmin

[GLSA]

Gentoo Linux Security Advisory

Title: phpMyAdmin: SQL injection (GLSA 202003-39)
Severity: normal
Exploitable: remote
Date: 2020-03-19
Bug(s): #701830
ID: 202003-39

Synopsis

An SQL injection vulnerability in phpMyAdmin may allow attackers to
execute arbitrary SQL statements.


Background

phpMyAdmin is a web-based management tool for MySQL databases.

Affected Packages

Package: dev-db/phpmyadmin
Vulnerable: < 4.9.2
Unaffected: >= 4.9.2
Architectures: All supported architectures


Description

PhpMyAdmin was vulnerable to an SQL injection attack through the
designer feature.


Impact

An authenticated remote attacker, by specifying a specially crafted
database/table name, could trigger an SQL injection attack.


Workaround

There is no known workaround at this time.

Resolution

All phpMyAdmin users should upgrade to the latest version: