VDB
GCVE-110-MAGEIA-2014-99
GCVE-110-MAGEIA-2014-99
Advisory Published
Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin
before 4.1.7 allows remote authenticated users to inject arbitrary
web script or HTML via a crafted filename in an import action
(CVE-2014-1879).
This upgrade provides the latest phpmyadmin version (4.1.8) to address
this vulnerability.
Additionally the phpseclib package has been added in Mageia 3 and updated in
Mageia 4, due to new dependencies.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | phpmyadmin | 0 (affected), 4.1.8-1.mga3 (unaffected), 0 (affected), 4.1.8-1.mga3 (unaffected) | — |
| Mageia | phpseclib | 0 (affected), 0 (affected), 0.3.5-1.mga3 (unaffected), 0.3.5-1.mga3 (unaffected) | — |
| Mageia | phpmyadmin | 0 (affected), 4.1.8-1.mga4 (unaffected), 0 (affected), 4.1.8-1.mga4 (unaffected) | — |
| Mageia | phpseclib | 0 (affected), 0.3.5-1.mga4 (unaffected), 0 (affected), 0.3.5-1.mga4 (unaffected) | — |
| Mageia | remmina | 0 (affected), 1.0.0-4.2.mga4 (unaffected) | — |
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.