PT-2019-18357
CVE-2019-6798
·
Published
2019-01-26
·
Updated
2026-10-31
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
phpMyAdmin versions prior to 4.8.5
Description
A SQL injection attack can be triggered through the designer feature by using a specially crafted
username. This allows for potential exploitation.Recommendations
For versions prior to 4.8.5, update to version 4.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the designer feature until a patch is applied. Avoid using specially crafted usernames in the affected feature to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾