Advisories » MGASA-2018-0304

Updated phpmyadmin packages fix security vulnerability

Publication date: 01 Jul 2018
Modification date: 01 Jul 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-12581

Description

A Cross-Site Scripting vulnerability was found in the Designer feature,
where an attacker can deliver a payload to a user through a
specially-crafted database name.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23227
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12581

SRPMS

6/core

• phpmyadmin-4.7.8-2.mga6