phpMyAdmin Fixes Severe Local File Inclusion Vulnerability

guest · Dec 12, 2018

phpMyAdmin Fixes Severe Local File Inclusion Vulnerability
XSRF/CSRF and XSS security issues also patched
December 12, 2018
https://news.softpedia.com/news/php...cal-file-inclusion-vulnerability-524255.shtml

As detailed in the phpMyAdmin PMASA-2018-6 advisory, versions from 4.0 to 4.8.3 of the MySQL and MariaDB administration software suffer from a flaw which could allow potential attackers to exploit the tool and get access to the contents of a local file.

"The attacker must have access to the phpMyAdmin Configuration Storage tables, although these can easily be created in any database to which the attacker has access," says the advisory. "An attacker must have valid credentials to log in to phpMyAdmin; this vulnerability does not allow an attacker to circumvent the login system."
Some bugs also fixed as part of the regular release cycle
phpMyAdmin versions up to and including 4.8.3 are also vulnerable to XSRF/CSRF attacks [...]
Moreover, the phpMyAdmin team also patched a XSS vulnerability in the navigation tree [...] PMASA-2018-8 security advisory
Click to expand...

Log in or Sign up

phpMyAdmin Fixes Severe Local File Inclusion Vulnerability

guest Guest

Log in or Sign up

phpMyAdmin Fixes Severe Local File Inclusion Vulnerability

guest Guest

Useful Searches