tocsin

Debian/phpmyadmin: medium 5.4

Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via a SQL query that triggers JSON

Action: Upgrade phpmyadmin to 4:4.5.4-1 or later.

Affected

introducedfixedlast affected
04:4.5.4-1-

Fixed versions

4:4.5.4-1

Sources

published · modified · JSON