Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-26935 →
DEBIAN-CVE-2020-26935
An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMy...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.7+dfsg1-1"}]}]
Debian:13
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.7+dfsg1-1"}]}]
Debian:14
phpmyadmin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.7+dfsg1-1"}]}]
Références
- advisory security-tracker.debian.org