Description

phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.

Remediation

References

CVE-2019-19617

Related Vulnerabilities

WordPress Plugin Alphabetic Pagination Security Bypass (3.0.7)

WordPress Plugin BuddyPress Multiple Cross-Site Request Forgery Vulnerabilities (2.8.1)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-1893)

WordPress Plugin Catch Themes Demo Import Unspecified Vulnerability (1.8)

Squid Improper Certificate Validation Vulnerability (CVE-2021-41611)

Severity

Critical

Classification

CVE-2019-19617 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities