All errata/sisyphus/ALT-PU-2018-2224-2
ALT-PU-2018-2224-2

Package update phpMyAdmin in branch sisyphus

Version4.8.3-alt1
Task#211915
Published2026-02-04
Max severityMEDIUM
Severity:

Closed issues (2)

CVE-2018-15605
MEDIUM6.1

An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature.

Published: 2018-08-24Modified: 2024-11-21
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS 3.xMEDIUM 6.1
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References
GHSA-c958-4j9x-q7w4
MEDIUM6.1

phpMyAdmin Cross-site Scripting (XSS) in the import dialog

Published: 2022-05-14Modified: 2024-04-24
CVSS 3.xMEDIUM 6.1
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
References