CVE-2019-12616

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.9.0

Description A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) to the victim.

Recommendations For versions prior to 4.9.0, update to version 4.9.0 or later to resolve the issue. As a temporary workaround, consider implementing additional CSRF protection measures to minimize the risk of exploitation. Restrict access to the phpMyAdmin database to minimize the risk of an attacker delivering a malicious payload.