This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-26935 →

DEBIAN-CVE-2020-26935

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMy...

Original description

The description as published by the source.

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.7+dfsg1-1"}]}]

Debian:13 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.7+dfsg1-1"}]}]

Debian:14 phpmyadmin

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.7+dfsg1-1"}]}]

References

advisory security-tracker.debian.org