MGASA-2014-0310

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2014-0310.html
Import Source
https://advisories.mageia.org/MGASA-2014-0310.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2014-0310
Related
Published
2014-08-05T20:08:48Z
Modified
2014-08-05T19:35:22Z
Summary
Updated phpmyadmin package fixes security vulnerabilities
Details

In phpMyAdmin before 4.1.14.2, when navigating into the database triggers page, it is possible to trigger an XSS with a crafted trigger name (CVE-2014-4955).

In phpMyAdmin before 4.1.14.2, with a crafted column name it is possible to trigger an XSS when dropping the column in table structure page. With a crafted table name it is possible to trigger an XSS when dropping or truncating the table in table operations page (CVE-2014-4986).

In phpMyAdmin before 4.1.14.2, An unpriviledged user could view the MySQL user list and manipulate the tabs displayed in phpMyAdmin for them (CVE-2014-4987).

References
Credits

Affected packages

Mageia:3 / phpmyadmin

Package

Name
phpmyadmin
Purl
pkg:rpm/mageia/phpmyadmin?distro=mageia-3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.1.14.2-1.mga3

Ecosystem specific 

{
    "section": "core"
}

Mageia:4 / phpmyadmin

Package

Name
phpmyadmin
Purl
pkg:rpm/mageia/phpmyadmin?distro=mageia-4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.1.14.2-1.mga4

Ecosystem specific 

{
    "section": "core"
}