GHSA-99xj-xqc9-98hrHighCVSS 8.8

phpMyAdmin SSRF in replication

Published
May 14, 2022
Last Modified
April 24, 2024

🔗 CVE IDs covered (1)

CVE-2017-1000017 →

📋 Description

phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server

🎯 Affected products3

  • composer/phpmyadmin/phpmyadmin:>= 4.6, < 4.6.6
  • composer/phpmyadmin/phpmyadmin:>= 4.4, < 4.4.15.10
  • composer/phpmyadmin/phpmyadmin:>= 4.0, < 4.0.10.19

🔗 References (4)