Bug 2563980 (CVE-2026-119427)
| Summary: | CVE-2026-119427 phpMyAdmin: phpMyAdmin: SQL injection via crafted Designer settings parameters | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in phpMyAdmin. An authenticated remote attacker can exploit a Structured Query Language (SQL) injection vulnerability in the Designer component by submitting crafted parameters when saving configuration settings. This issue allows the attacker to execute unintended database queries, potentially accessing restricted data or overwriting configuration settings belonging to other users.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2565518, 2565520, 2565521, 2565522, 2565524 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-30 13:00:22 UTC
|