Advisories » MGASA-2014-0402

Updated phpmyadmin package fixes security vulnerability

Publication date: 07 Oct 2014
Modification date: 07 Oct 2014
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-7217

Description

In phpMyAdmin before 4.1.14.4, with a crafted ENUM value it is possible to
trigger an XSS in table search and table structure pages (CVE-2014-7217).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14208
• http://www.phpmyadmin.net/home_page/security/PMASA-2014-11.php
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7217

SRPMS

4/core

• phpmyadmin-4.1.14.5-1.mga4

3/core

• phpmyadmin-4.1.14.5-1.mga3