Bug 2564000 (CVE-2026-119562)
| Summary: | CVE-2026-119562 phpMyAdmin: phpMyAdmin: SQL injection via central columns interface | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security <prodsec-ir-bot> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in phpMyAdmin. An authenticated user can exploit a Structured Query Language (SQL) injection vulnerability by submitting unescaped parameters to the central columns interface. Because these inputs are processed into database queries executed with elevated control user privileges, an attacker can read or modify configuration storage data belonging to other users.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2565504, 2565505, 2565506, 2565507, 2565508 | ||
| Bug Blocks: | |||
|
Description
OSIDB Bzimport
2026-10-30 13:22:51 UTC
|