应用安全 - Web框架 - 数据库管理 - phpMyAdmin - 漏洞汇总

Date:
2019.10.28

类型：
SQL injection in Designer feature

影响范围：
phpMyAdmin versions prior to 4.9.2 are affected, at least as old as 4.7.7.

修复：
Upgrade to phpMyAdmin 4.9.2 or newer or apply patch listed below for versions older than 4.9.2
https://github.com/phpmyadmin/phpmyadmin/commit/ff541af95d7155d8dd326f331b5e248fea8e7111

Date:

2019.1.22

类型：

arbitrary file read vulnerability

影响范围：

4.x < 4.8.5

Date:
2019.1.22

类型：
SQL injection 

影响范围：
4.x < 4.8.5