VYPR
Moderate severityNVD Advisory· Published Aug 24, 2018· Updated Aug 5, 2024

CVE-2018-15605

CVE-2018-15605

Description

An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A cross-site scripting vulnerability in phpMyAdmin before 4.8.3 allows an attacker to manipulate an authenticated user via a crafted file in the import feature.

Vulnerability

A Cross-Site Scripting (XSS) vulnerability exists in phpMyAdmin versions prior to 4.8.3. The flaw resides in the file import feature, where warning messages from imported files are not properly sanitized before being displayed to the user. Specifically, a crafted file can inject arbitrary HTML or JavaScript into the import dialog [1][3].

Exploitation

An attacker must craft a malicious file (e.g., a SQL file containing embedded script) and convince an authenticated phpMyAdmin user to import it through the import functionality. The attacker does not require any special privileges beyond normal user access. The victim must be logged in and actively use the import feature [3].

Impact

Successful exploitation allows the attacker to execute arbitrary JavaScript in the context of the victim's phpMyAdmin session. This could lead to information disclosure, session hijacking, or unauthorized actions performed on behalf of the victim, potentially compromising the entire database management interface [1][3].

Mitigation

Users should upgrade to phpMyAdmin 4.8.3 or later, which contains the fix. Alternatively, apply the patch from commit 00d90b3ae415b31338f76263359467a9fbebd0a1 [4]. No known workarounds exist prior to patching [3].

AI Insight generated on May 22, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
phpmyadmin/phpmyadminPackagist
< 4.8.34.8.3

Affected products

3

Patches

2
b838363dc3bc

Adding composer lock for 4.8.3

https://github.com/phpmyadmin/phpmyadminIsaac BennetchAug 22, 2018via osv
1 file changed · +2665 0
  • composer.lock+2665 0 added
    @@ -0,0 +1,2665 @@
    +{
    +    "_readme": [
    +        "This file locks the dependencies of your project to a known state",
    +        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
    +        "This file is @generated automatically"
    +    ],
    +    "content-hash": "546f5ce1f7778a51182ee46f0356d063",
    +    "packages": [
    +        {
    +            "name": "bacon/bacon-qr-code",
    +            "version": "1.0.3",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/Bacon/BaconQrCode.git",
    +                "reference": "5a91b62b9d37cee635bbf8d553f4546057250bee"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/Bacon/BaconQrCode/zipball/5a91b62b9d37cee635bbf8d553f4546057250bee",
    +                "reference": "5a91b62b9d37cee635bbf8d553f4546057250bee",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "ext-iconv": "*",
    +                "php": "^5.4|^7.0"
    +            },
    +            "require-dev": {
    +                "phpunit/phpunit": "^4.8"
    +            },
    +            "suggest": {
    +                "ext-gd": "to generate QR code images"
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "psr-0": {
    +                    "BaconQrCode": "src/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-2-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Ben Scholzen 'DASPRiD'",
    +                    "email": "mail@dasprids.de",
    +                    "homepage": "http://www.dasprids.de",
    +                    "role": "Developer"
    +                }
    +            ],
    +            "description": "BaconQrCode is a QR code generator for PHP.",
    +            "homepage": "https://github.com/Bacon/BaconQrCode",
    +            "time": "2017-10-17T09:59:25+00:00"
    +        },
    +        {
    +            "name": "google/recaptcha",
    +            "version": "1.2.1",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/google/recaptcha.git",
    +                "reference": "e7add3be59211482ecdb942288f52da64a35f61a"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/google/recaptcha/zipball/e7add3be59211482ecdb942288f52da64a35f61a",
    +                "reference": "e7add3be59211482ecdb942288f52da64a35f61a",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.5"
    +            },
    +            "require-dev": {
    +                "friendsofphp/php-cs-fixer": "^2.2.20|^2.12",
    +                "php-coveralls/php-coveralls": "^2.1",
    +                "phpunit/phpunit": "^4.8.36|^5.7.27|^6.59|^7"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.2.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "ReCaptcha\\": "src/ReCaptcha"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-3-Clause"
    +            ],
    +            "description": "Client library for reCAPTCHA, a free service that protects websites from spam and abuse.",
    +            "homepage": "https://www.google.com/recaptcha/",
    +            "keywords": [
    +                "Abuse",
    +                "captcha",
    +                "recaptcha",
    +                "spam"
    +            ],
    +            "time": "2018-08-05T09:31:53+00:00"
    +        },
    +        {
    +            "name": "paragonie/constant_time_encoding",
    +            "version": "v1.0.4",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/paragonie/constant_time_encoding.git",
    +                "reference": "2132f0f293d856026d7d11bd81b9f4a23a1dc1f6"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/paragonie/constant_time_encoding/zipball/2132f0f293d856026d7d11bd81b9f4a23a1dc1f6",
    +                "reference": "2132f0f293d856026d7d11bd81b9f4a23a1dc1f6",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": "^5.3|^7"
    +            },
    +            "require-dev": {
    +                "paragonie/random_compat": "^1.4|^2",
    +                "phpunit/phpunit": "4.*|5.*",
    +                "vimeo/psalm": "^0.3|^1"
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "psr-4": {
    +                    "ParagonIE\\ConstantTime\\": "src/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Paragon Initiative Enterprises",
    +                    "email": "security@paragonie.com",
    +                    "homepage": "https://paragonie.com",
    +                    "role": "Maintainer"
    +                },
    +                {
    +                    "name": "Steve 'Sc00bz' Thomas",
    +                    "email": "steve@tobtu.com",
    +                    "homepage": "https://www.tobtu.com",
    +                    "role": "Original Developer"
    +                }
    +            ],
    +            "description": "Constant-time Implementations of RFC 4648 Encoding (Base-64, Base-32, Base-16)",
    +            "keywords": [
    +                "base16",
    +                "base32",
    +                "base32_decode",
    +                "base32_encode",
    +                "base64",
    +                "base64_decode",
    +                "base64_encode",
    +                "bin2hex",
    +                "encoding",
    +                "hex",
    +                "hex2bin",
    +                "rfc4648"
    +            ],
    +            "time": "2018-04-30T17:57:16+00:00"
    +        },
    +        {
    +            "name": "paragonie/random_compat",
    +            "version": "v2.0.17",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/paragonie/random_compat.git",
    +                "reference": "29af24f25bab834fcbb38ad2a69fa93b867e070d"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/paragonie/random_compat/zipball/29af24f25bab834fcbb38ad2a69fa93b867e070d",
    +                "reference": "29af24f25bab834fcbb38ad2a69fa93b867e070d",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.2.0"
    +            },
    +            "require-dev": {
    +                "phpunit/phpunit": "4.*|5.*"
    +            },
    +            "suggest": {
    +                "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes."
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "files": [
    +                    "lib/random.php"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Paragon Initiative Enterprises",
    +                    "email": "security@paragonie.com",
    +                    "homepage": "https://paragonie.com"
    +                }
    +            ],
    +            "description": "PHP 5.x polyfill for random_bytes() and random_int() from PHP 7",
    +            "keywords": [
    +                "csprng",
    +                "polyfill",
    +                "pseudorandom",
    +                "random"
    +            ],
    +            "time": "2018-07-04T16:31:37+00:00"
    +        },
    +        {
    +            "name": "phpmyadmin/motranslator",
    +            "version": "4.0",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpmyadmin/motranslator.git",
    +                "reference": "fcb370254998fda7eeccfd7c787b4deb71b0d77c"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpmyadmin/motranslator/zipball/fcb370254998fda7eeccfd7c787b4deb71b0d77c",
    +                "reference": "fcb370254998fda7eeccfd7c787b4deb71b0d77c",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.0",
    +                "symfony/expression-language": "^4.0 || ^3.2 || ^2.8"
    +            },
    +            "require-dev": {
    +                "apigen/apigen": "^4.1",
    +                "phpunit/php-code-coverage": "*",
    +                "phpunit/phpunit": "~4.8 || ~5.7 || ~6.5"
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "psr-4": {
    +                    "PhpMyAdmin\\MoTranslator\\": "src"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "GPL-2.0-or-later"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "The phpMyAdmin Team",
    +                    "email": "developers@phpmyadmin.net",
    +                    "homepage": "https://www.phpmyadmin.net/team/"
    +                }
    +            ],
    +            "description": "Translation API for PHP using Gettext MO files",
    +            "homepage": "https://github.com/phpmyadmin/motranslator",
    +            "keywords": [
    +                "gettext",
    +                "i18n",
    +                "mo",
    +                "translator"
    +            ],
    +            "time": "2018-02-12T13:22:52+00:00"
    +        },
    +        {
    +            "name": "phpmyadmin/shapefile",
    +            "version": "2.1",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpmyadmin/shapefile.git",
    +                "reference": "e23b767f2a81f61fee3fc09fc062879985f3e224"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpmyadmin/shapefile/zipball/e23b767f2a81f61fee3fc09fc062879985f3e224",
    +                "reference": "e23b767f2a81f61fee3fc09fc062879985f3e224",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.4.0"
    +            },
    +            "require-dev": {
    +                "phpunit/php-code-coverage": "*",
    +                "phpunit/phpunit": "~4.8 || ~5.7"
    +            },
    +            "suggest": {
    +                "ext-dbase": "For dbf files parsing"
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "psr-4": {
    +                    "PhpMyAdmin\\ShapeFile\\": "src"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "GPL-2.0+"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "The phpMyAdmin Team",
    +                    "email": "developers@phpmyadmin.net",
    +                    "homepage": "https://www.phpmyadmin.net/team/"
    +                }
    +            ],
    +            "description": "ESRI ShapeFile library for PHP",
    +            "homepage": "https://github.com/phpmyadmin/shapefile",
    +            "keywords": [
    +                "ESRI",
    +                "Shapefile",
    +                "dbf",
    +                "geo",
    +                "geospatial",
    +                "shape",
    +                "shp"
    +            ],
    +            "time": "2017-05-15T08:31:47+00:00"
    +        },
    +        {
    +            "name": "phpmyadmin/sql-parser",
    +            "version": "v4.2.4",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpmyadmin/sql-parser.git",
    +                "reference": "10f4e571ba3903593ea7e2c4ec5304f3c0323a98"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpmyadmin/sql-parser/zipball/10f4e571ba3903593ea7e2c4ec5304f3c0323a98",
    +                "reference": "10f4e571ba3903593ea7e2c4ec5304f3c0323a98",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.0",
    +                "symfony/polyfill-mbstring": "^1.3"
    +            },
    +            "conflict": {
    +                "phpmyadmin/motranslator": "<3.0"
    +            },
    +            "require-dev": {
    +                "phpunit/php-code-coverage": "*",
    +                "phpunit/phpunit": "~4.8 || ~5.7"
    +            },
    +            "suggest": {
    +                "ext-mbstring": "For best performance",
    +                "phpmyadmin/motranslator": "Translate messages to your favorite locale"
    +            },
    +            "bin": [
    +                "bin/highlight-query",
    +                "bin/lint-query"
    +            ],
    +            "type": "library",
    +            "autoload": {
    +                "psr-4": {
    +                    "PhpMyAdmin\\SqlParser\\": "src"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "GPL-2.0+"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "The phpMyAdmin Team",
    +                    "email": "developers@phpmyadmin.net",
    +                    "homepage": "https://www.phpmyadmin.net/team/"
    +                }
    +            ],
    +            "description": "A validating SQL lexer and parser with a focus on MySQL dialect.",
    +            "homepage": "https://github.com/phpmyadmin/sql-parser",
    +            "keywords": [
    +                "analysis",
    +                "lexer",
    +                "parser",
    +                "sql"
    +            ],
    +            "time": "2017-12-06T09:53:26+00:00"
    +        },
    +        {
    +            "name": "phpseclib/phpseclib",
    +            "version": "2.0.11",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpseclib/phpseclib.git",
    +                "reference": "7053f06f91b3de78e143d430e55a8f7889efc08b"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/7053f06f91b3de78e143d430e55a8f7889efc08b",
    +                "reference": "7053f06f91b3de78e143d430e55a8f7889efc08b",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3"
    +            },
    +            "require-dev": {
    +                "phing/phing": "~2.7",
    +                "phpunit/phpunit": "^4.8.35|^5.7|^6.0",
    +                "sami/sami": "~2.0",
    +                "squizlabs/php_codesniffer": "~2.0"
    +            },
    +            "suggest": {
    +                "ext-gmp": "Install the GMP (GNU Multiple Precision) extension in order to speed up arbitrary precision integer arithmetic operations.",
    +                "ext-libsodium": "SSH2/SFTP can make use of some algorithms provided by the libsodium-php extension.",
    +                "ext-mcrypt": "Install the Mcrypt extension in order to speed up a few other cryptographic operations.",
    +                "ext-openssl": "Install the OpenSSL extension in order to speed up a wide variety of cryptographic operations."
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "files": [
    +                    "phpseclib/bootstrap.php"
    +                ],
    +                "psr-4": {
    +                    "phpseclib\\": "phpseclib/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Jim Wigginton",
    +                    "email": "terrafrost@php.net",
    +                    "role": "Lead Developer"
    +                },
    +                {
    +                    "name": "Patrick Monnerat",
    +                    "email": "pm@datasphere.ch",
    +                    "role": "Developer"
    +                },
    +                {
    +                    "name": "Andreas Fischer",
    +                    "email": "bantu@phpbb.com",
    +                    "role": "Developer"
    +                },
    +                {
    +                    "name": "Hans-Jürgen Petrich",
    +                    "email": "petrich@tronic-media.com",
    +                    "role": "Developer"
    +                },
    +                {
    +                    "name": "Graham Campbell",
    +                    "email": "graham@alt-three.com",
    +                    "role": "Developer"
    +                }
    +            ],
    +            "description": "PHP Secure Communications Library - Pure-PHP implementations of RSA, AES, SSH2, SFTP, X.509 etc.",
    +            "homepage": "http://phpseclib.sourceforge.net",
    +            "keywords": [
    +                "BigInteger",
    +                "aes",
    +                "asn.1",
    +                "asn1",
    +                "blowfish",
    +                "crypto",
    +                "cryptography",
    +                "encryption",
    +                "rsa",
    +                "security",
    +                "sftp",
    +                "signature",
    +                "signing",
    +                "ssh",
    +                "twofish",
    +                "x.509",
    +                "x509"
    +            ],
    +            "time": "2018-04-15T16:55:05+00:00"
    +        },
    +        {
    +            "name": "pragmarx/google2fa",
    +            "version": "v3.0.2",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/antonioribeiro/google2fa.git",
    +                "reference": "d9d960370277958c700552c551e136018b915499"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/antonioribeiro/google2fa/zipball/d9d960370277958c700552c551e136018b915499",
    +                "reference": "d9d960370277958c700552c551e136018b915499",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "paragonie/constant_time_encoding": "~1.0|~2.0",
    +                "paragonie/random_compat": ">=1 <9.99",
    +                "php": ">=5.4",
    +                "symfony/polyfill-php56": "~1.2"
    +            },
    +            "require-dev": {
    +                "bacon/bacon-qr-code": "~1.0",
    +                "phpunit/phpunit": "~4|~5|~6"
    +            },
    +            "suggest": {
    +                "bacon/bacon-qr-code": "Required to generate inline QR Codes."
    +            },
    +            "type": "library",
    +            "extra": {
    +                "component": "package",
    +                "branch-alias": {
    +                    "dev-master": "2.0-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "PragmaRX\\Google2FA\\": "src/",
    +                    "PragmaRX\\Google2FA\\Tests\\": "tests/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Antonio Carlos Ribeiro",
    +                    "email": "acr@antoniocarlosribeiro.com",
    +                    "role": "Creator & Designer"
    +                }
    +            ],
    +            "description": "A One Time Password Authentication package, compatible with Google Authenticator.",
    +            "keywords": [
    +                "2fa",
    +                "Authentication",
    +                "Two Factor Authentication",
    +                "google2fa",
    +                "laravel"
    +            ],
    +            "time": "2018-07-31T23:31:19+00:00"
    +        },
    +        {
    +            "name": "psr/container",
    +            "version": "1.0.0",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/php-fig/container.git",
    +                "reference": "b7ce3b176482dbbc1245ebf52b181af44c2cf55f"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/php-fig/container/zipball/b7ce3b176482dbbc1245ebf52b181af44c2cf55f",
    +                "reference": "b7ce3b176482dbbc1245ebf52b181af44c2cf55f",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.0"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.0.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "Psr\\Container\\": "src/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "PHP-FIG",
    +                    "homepage": "http://www.php-fig.org/"
    +                }
    +            ],
    +            "description": "Common Container Interface (PHP FIG PSR-11)",
    +            "homepage": "https://github.com/php-fig/container",
    +            "keywords": [
    +                "PSR-11",
    +                "container",
    +                "container-interface",
    +                "container-interop",
    +                "psr"
    +            ],
    +            "time": "2017-02-14T16:28:37+00:00"
    +        },
    +        {
    +            "name": "samyoul/u2f-php-server",
    +            "version": "v1.1.3",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/Samyoul/U2F-php-server.git",
    +                "reference": "815279529ddd63b349dea9a1d0817fa2775d81c8"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/Samyoul/U2F-php-server/zipball/815279529ddd63b349dea9a1d0817fa2775d81c8",
    +                "reference": "815279529ddd63b349dea9a1d0817fa2775d81c8",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "ext-openssl": "*"
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "psr-4": {
    +                    "Samyoul\\U2F\\U2FServer\\": [
    +                        "src/"
    +                    ]
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-2-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Samuel Hawksby-Robinson",
    +                    "email": "samuel@samyoul.com"
    +                }
    +            ],
    +            "description": "Server side handling class for FIDO U2F registration and authentication",
    +            "time": "2016-12-14T11:52:47+00:00"
    +        },
    +        {
    +            "name": "symfony/expression-language",
    +            "version": "v2.8.44",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/symfony/expression-language.git",
    +                "reference": "aa8931b2c8ae64f58db2617cf109deebdb31d967"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/symfony/expression-language/zipball/aa8931b2c8ae64f58db2617cf109deebdb31d967",
    +                "reference": "aa8931b2c8ae64f58db2617cf109deebdb31d967",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.9"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "2.8-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "Symfony\\Component\\ExpressionLanguage\\": ""
    +                },
    +                "exclude-from-classmap": [
    +                    "/Tests/"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Fabien Potencier",
    +                    "email": "fabien@symfony.com"
    +                },
    +                {
    +                    "name": "Symfony Community",
    +                    "homepage": "https://symfony.com/contributors"
    +                }
    +            ],
    +            "description": "Symfony ExpressionLanguage Component",
    +            "homepage": "https://symfony.com",
    +            "time": "2018-07-26T09:03:18+00:00"
    +        },
    +        {
    +            "name": "symfony/polyfill-ctype",
    +            "version": "v1.9.0",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/symfony/polyfill-ctype.git",
    +                "reference": "e3d826245268269cd66f8326bd8bc066687b4a19"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/symfony/polyfill-ctype/zipball/e3d826245268269cd66f8326bd8bc066687b4a19",
    +                "reference": "e3d826245268269cd66f8326bd8bc066687b4a19",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3"
    +            },
    +            "suggest": {
    +                "ext-ctype": "For best performance"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.9-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "Symfony\\Polyfill\\Ctype\\": ""
    +                },
    +                "files": [
    +                    "bootstrap.php"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Symfony Community",
    +                    "homepage": "https://symfony.com/contributors"
    +                },
    +                {
    +                    "name": "Gert de Pagter",
    +                    "email": "BackEndTea@gmail.com"
    +                }
    +            ],
    +            "description": "Symfony polyfill for ctype functions",
    +            "homepage": "https://symfony.com",
    +            "keywords": [
    +                "compatibility",
    +                "ctype",
    +                "polyfill",
    +                "portable"
    +            ],
    +            "time": "2018-08-06T14:22:27+00:00"
    +        },
    +        {
    +            "name": "symfony/polyfill-mbstring",
    +            "version": "v1.9.0",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/symfony/polyfill-mbstring.git",
    +                "reference": "d0cd638f4634c16d8df4508e847f14e9e43168b8"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/d0cd638f4634c16d8df4508e847f14e9e43168b8",
    +                "reference": "d0cd638f4634c16d8df4508e847f14e9e43168b8",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3"
    +            },
    +            "suggest": {
    +                "ext-mbstring": "For best performance"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.9-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "Symfony\\Polyfill\\Mbstring\\": ""
    +                },
    +                "files": [
    +                    "bootstrap.php"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Nicolas Grekas",
    +                    "email": "p@tchwork.com"
    +                },
    +                {
    +                    "name": "Symfony Community",
    +                    "homepage": "https://symfony.com/contributors"
    +                }
    +            ],
    +            "description": "Symfony polyfill for the Mbstring extension",
    +            "homepage": "https://symfony.com",
    +            "keywords": [
    +                "compatibility",
    +                "mbstring",
    +                "polyfill",
    +                "portable",
    +                "shim"
    +            ],
    +            "time": "2018-08-06T14:22:27+00:00"
    +        },
    +        {
    +            "name": "symfony/polyfill-php56",
    +            "version": "v1.9.0",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/symfony/polyfill-php56.git",
    +                "reference": "7b4fc009172cc0196535b0328bd1226284a28000"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/symfony/polyfill-php56/zipball/7b4fc009172cc0196535b0328bd1226284a28000",
    +                "reference": "7b4fc009172cc0196535b0328bd1226284a28000",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3",
    +                "symfony/polyfill-util": "~1.0"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.9-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "Symfony\\Polyfill\\Php56\\": ""
    +                },
    +                "files": [
    +                    "bootstrap.php"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Nicolas Grekas",
    +                    "email": "p@tchwork.com"
    +                },
    +                {
    +                    "name": "Symfony Community",
    +                    "homepage": "https://symfony.com/contributors"
    +                }
    +            ],
    +            "description": "Symfony polyfill backporting some PHP 5.6+ features to lower PHP versions",
    +            "homepage": "https://symfony.com",
    +            "keywords": [
    +                "compatibility",
    +                "polyfill",
    +                "portable",
    +                "shim"
    +            ],
    +            "time": "2018-08-06T14:22:27+00:00"
    +        },
    +        {
    +            "name": "symfony/polyfill-util",
    +            "version": "v1.9.0",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/symfony/polyfill-util.git",
    +                "reference": "8e15d04ba3440984d23e7964b2ee1d25c8de1581"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/symfony/polyfill-util/zipball/8e15d04ba3440984d23e7964b2ee1d25c8de1581",
    +                "reference": "8e15d04ba3440984d23e7964b2ee1d25c8de1581",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.9-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "Symfony\\Polyfill\\Util\\": ""
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Nicolas Grekas",
    +                    "email": "p@tchwork.com"
    +                },
    +                {
    +                    "name": "Symfony Community",
    +                    "homepage": "https://symfony.com/contributors"
    +                }
    +            ],
    +            "description": "Symfony utilities for portability of PHP codes",
    +            "homepage": "https://symfony.com",
    +            "keywords": [
    +                "compat",
    +                "compatibility",
    +                "polyfill",
    +                "shim"
    +            ],
    +            "time": "2018-08-06T14:22:27+00:00"
    +        },
    +        {
    +            "name": "tecnickcom/tcpdf",
    +            "version": "6.2.17",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/tecnickcom/TCPDF.git",
    +                "reference": "64fc19439863e1b1314487a72a74d9bfd0b55a53"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/tecnickcom/TCPDF/zipball/64fc19439863e1b1314487a72a74d9bfd0b55a53",
    +                "reference": "64fc19439863e1b1314487a72a74d9bfd0b55a53",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.0"
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "classmap": [
    +                    "config",
    +                    "include",
    +                    "tcpdf.php",
    +                    "tcpdf_parser.php",
    +                    "tcpdf_import.php",
    +                    "tcpdf_barcodes_1d.php",
    +                    "tcpdf_barcodes_2d.php",
    +                    "include/tcpdf_colors.php",
    +                    "include/tcpdf_filters.php",
    +                    "include/tcpdf_font_data.php",
    +                    "include/tcpdf_fonts.php",
    +                    "include/tcpdf_images.php",
    +                    "include/tcpdf_static.php",
    +                    "include/barcodes/datamatrix.php",
    +                    "include/barcodes/pdf417.php",
    +                    "include/barcodes/qrcode.php"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "LGPL-3.0"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Nicola Asuni",
    +                    "email": "info@tecnick.com",
    +                    "role": "lead"
    +                }
    +            ],
    +            "description": "TCPDF is a PHP class for generating PDF documents and barcodes.",
    +            "homepage": "http://www.tcpdf.org/",
    +            "keywords": [
    +                "PDFD32000-2008",
    +                "TCPDF",
    +                "barcodes",
    +                "datamatrix",
    +                "pdf",
    +                "pdf417",
    +                "qrcode"
    +            ],
    +            "time": "2018-02-24T11:48:20+00:00"
    +        },
    +        {
    +            "name": "twig/extensions",
    +            "version": "v1.5.2",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/twigphp/Twig-extensions.git",
    +                "reference": "2c1a86526d0044065220d1b51ac08348bea5ca82"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/twigphp/Twig-extensions/zipball/2c1a86526d0044065220d1b51ac08348bea5ca82",
    +                "reference": "2c1a86526d0044065220d1b51ac08348bea5ca82",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "twig/twig": "^1.27|^2.0"
    +            },
    +            "require-dev": {
    +                "symfony/phpunit-bridge": "^3.4",
    +                "symfony/translation": "^2.7|^3.4"
    +            },
    +            "suggest": {
    +                "symfony/translation": "Allow the time_diff output to be translated"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.5-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-0": {
    +                    "Twig_Extensions_": "lib/"
    +                },
    +                "psr-4": {
    +                    "Twig\\Extensions\\": "src/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Fabien Potencier",
    +                    "email": "fabien@symfony.com"
    +                }
    +            ],
    +            "description": "Common additional features for Twig that do not directly belong in core",
    +            "keywords": [
    +                "i18n",
    +                "text"
    +            ],
    +            "time": "2018-05-22T13:26:07+00:00"
    +        },
    +        {
    +            "name": "twig/twig",
    +            "version": "v1.35.4",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/twigphp/Twig.git",
    +                "reference": "7e081e98378a1e78c29cc9eba4aefa5d78a05d2a"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/twigphp/Twig/zipball/7e081e98378a1e78c29cc9eba4aefa5d78a05d2a",
    +                "reference": "7e081e98378a1e78c29cc9eba4aefa5d78a05d2a",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3",
    +                "symfony/polyfill-ctype": "^1.8"
    +            },
    +            "require-dev": {
    +                "psr/container": "^1.0",
    +                "symfony/debug": "^2.7",
    +                "symfony/phpunit-bridge": "^3.3"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.35-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-0": {
    +                    "Twig_": "lib/"
    +                },
    +                "psr-4": {
    +                    "Twig\\": "src/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-3-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Fabien Potencier",
    +                    "email": "fabien@symfony.com",
    +                    "homepage": "http://fabien.potencier.org",
    +                    "role": "Lead Developer"
    +                },
    +                {
    +                    "name": "Armin Ronacher",
    +                    "email": "armin.ronacher@active-4.com",
    +                    "role": "Project Founder"
    +                },
    +                {
    +                    "name": "Twig Team",
    +                    "homepage": "https://twig.symfony.com/contributors",
    +                    "role": "Contributors"
    +                }
    +            ],
    +            "description": "Twig, the flexible, fast, and secure template language for PHP",
    +            "homepage": "https://twig.symfony.com",
    +            "keywords": [
    +                "templating"
    +            ],
    +            "time": "2018-07-13T07:12:17+00:00"
    +        }
    +    ],
    +    "packages-dev": [
    +        {
    +            "name": "codacy/coverage",
    +            "version": "1.4.2",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/codacy/php-codacy-coverage.git",
    +                "reference": "4988cd098db4d578681bfd3176071931ad475150"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/codacy/php-codacy-coverage/zipball/4988cd098db4d578681bfd3176071931ad475150",
    +                "reference": "4988cd098db4d578681bfd3176071931ad475150",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "gitonomy/gitlib": ">=1.0",
    +                "php": ">=5.3.3",
    +                "symfony/console": "~2.5|~3.0|~4.0"
    +            },
    +            "require-dev": {
    +                "phpunit/phpunit": "~6.5"
    +            },
    +            "bin": [
    +                "bin/codacycoverage"
    +            ],
    +            "type": "library",
    +            "autoload": {
    +                "classmap": [
    +                    "src/"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Jakob Pupke",
    +                    "email": "jakob.pupke@gmail.com"
    +                }
    +            ],
    +            "description": "Sends PHP test coverage information to Codacy.",
    +            "homepage": "https://github.com/codacy/php-codacy-coverage",
    +            "time": "2018-03-22T16:43:39+00:00"
    +        },
    +        {
    +            "name": "doctrine/instantiator",
    +            "version": "1.0.5",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/doctrine/instantiator.git",
    +                "reference": "8e884e78f9f0eb1329e445619e04456e64d8051d"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/doctrine/instantiator/zipball/8e884e78f9f0eb1329e445619e04456e64d8051d",
    +                "reference": "8e884e78f9f0eb1329e445619e04456e64d8051d",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3,<8.0-DEV"
    +            },
    +            "require-dev": {
    +                "athletic/athletic": "~0.1.8",
    +                "ext-pdo": "*",
    +                "ext-phar": "*",
    +                "phpunit/phpunit": "~4.0",
    +                "squizlabs/php_codesniffer": "~2.0"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.0.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "Doctrine\\Instantiator\\": "src/Doctrine/Instantiator/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Marco Pivetta",
    +                    "email": "ocramius@gmail.com",
    +                    "homepage": "http://ocramius.github.com/"
    +                }
    +            ],
    +            "description": "A small, lightweight utility to instantiate objects in PHP without invoking their constructors",
    +            "homepage": "https://github.com/doctrine/instantiator",
    +            "keywords": [
    +                "constructor",
    +                "instantiate"
    +            ],
    +            "time": "2015-06-14T21:17:01+00:00"
    +        },
    +        {
    +            "name": "gitonomy/gitlib",
    +            "version": "v1.0.4",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/gitonomy/gitlib.git",
    +                "reference": "932a960221ae3484a3e82553b3be478e56beb68d"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/gitonomy/gitlib/zipball/932a960221ae3484a3e82553b3be478e56beb68d",
    +                "reference": "932a960221ae3484a3e82553b3be478e56beb68d",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": "^5.3 || ^7.0",
    +                "symfony/process": "^2.3|^3.0|^4.0"
    +            },
    +            "require-dev": {
    +                "phpunit/phpunit": "^4.8.35|^5.7",
    +                "psr/log": "^1.0"
    +            },
    +            "suggest": {
    +                "psr/log": "Add some log"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.0-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "Gitonomy\\Git\\": "src/Gitonomy/Git/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Alexandre Salomé",
    +                    "email": "alexandre.salome@gmail.com",
    +                    "homepage": "http://alexandre-salome.fr"
    +                },
    +                {
    +                    "name": "Julien DIDIER",
    +                    "email": "genzo.wm@gmail.com",
    +                    "homepage": "http://www.jdidier.net"
    +                }
    +            ],
    +            "description": "Library for accessing git",
    +            "homepage": "http://gitonomy.com",
    +            "time": "2018-04-22T19:55:36+00:00"
    +        },
    +        {
    +            "name": "phpdocumentor/reflection-common",
    +            "version": "1.0.1",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpDocumentor/ReflectionCommon.git",
    +                "reference": "21bdeb5f65d7ebf9f43b1b25d404f87deab5bfb6"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpDocumentor/ReflectionCommon/zipball/21bdeb5f65d7ebf9f43b1b25d404f87deab5bfb6",
    +                "reference": "21bdeb5f65d7ebf9f43b1b25d404f87deab5bfb6",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.5"
    +            },
    +            "require-dev": {
    +                "phpunit/phpunit": "^4.6"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.0.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "phpDocumentor\\Reflection\\": [
    +                        "src"
    +                    ]
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Jaap van Otterdijk",
    +                    "email": "opensource@ijaap.nl"
    +                }
    +            ],
    +            "description": "Common reflection classes used by phpdocumentor to reflect the code structure",
    +            "homepage": "http://www.phpdoc.org",
    +            "keywords": [
    +                "FQSEN",
    +                "phpDocumentor",
    +                "phpdoc",
    +                "reflection",
    +                "static analysis"
    +            ],
    +            "time": "2017-09-11T18:02:19+00:00"
    +        },
    +        {
    +            "name": "phpdocumentor/reflection-docblock",
    +            "version": "3.2.2",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpDocumentor/ReflectionDocBlock.git",
    +                "reference": "4aada1f93c72c35e22fb1383b47fee43b8f1d157"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpDocumentor/ReflectionDocBlock/zipball/4aada1f93c72c35e22fb1383b47fee43b8f1d157",
    +                "reference": "4aada1f93c72c35e22fb1383b47fee43b8f1d157",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.5",
    +                "phpdocumentor/reflection-common": "^1.0@dev",
    +                "phpdocumentor/type-resolver": "^0.3.0",
    +                "webmozart/assert": "^1.0"
    +            },
    +            "require-dev": {
    +                "mockery/mockery": "^0.9.4",
    +                "phpunit/phpunit": "^4.4"
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "psr-4": {
    +                    "phpDocumentor\\Reflection\\": [
    +                        "src/"
    +                    ]
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Mike van Riel",
    +                    "email": "me@mikevanriel.com"
    +                }
    +            ],
    +            "description": "With this component, a library can provide support for annotations via DocBlocks or otherwise retrieve information that is embedded in a DocBlock.",
    +            "time": "2017-08-08T06:39:58+00:00"
    +        },
    +        {
    +            "name": "phpdocumentor/type-resolver",
    +            "version": "0.3.0",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpDocumentor/TypeResolver.git",
    +                "reference": "fb3933512008d8162b3cdf9e18dba9309b7c3773"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpDocumentor/TypeResolver/zipball/fb3933512008d8162b3cdf9e18dba9309b7c3773",
    +                "reference": "fb3933512008d8162b3cdf9e18dba9309b7c3773",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": "^5.5 || ^7.0",
    +                "phpdocumentor/reflection-common": "^1.0"
    +            },
    +            "require-dev": {
    +                "mockery/mockery": "^0.9.4",
    +                "phpunit/phpunit": "^5.2||^4.8.24"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.0.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-4": {
    +                    "phpDocumentor\\Reflection\\": [
    +                        "src/"
    +                    ]
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Mike van Riel",
    +                    "email": "me@mikevanriel.com"
    +                }
    +            ],
    +            "time": "2017-06-03T08:32:36+00:00"
    +        },
    +        {
    +            "name": "phpmyadmin/coding-standard",
    +            "version": "0.3",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpmyadmin/coding-standard.git",
    +                "reference": "5ae123e27140a1e16be005432e26a8233524eaf5"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpmyadmin/coding-standard/zipball/5ae123e27140a1e16be005432e26a8233524eaf5",
    +                "reference": "5ae123e27140a1e16be005432e26a8233524eaf5",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "squizlabs/php_codesniffer": "^3.0"
    +            },
    +            "type": "phpcodesniffer-standard",
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "The phpMyAdmin Team",
    +                    "email": "developers@phpmyadmin.net",
    +                    "homepage": "https://www.phpmyadmin.net/team/"
    +                }
    +            ],
    +            "description": "phpMyAdmin PHP CodeSniffer Coding Standard",
    +            "keywords": [
    +                "codesniffer",
    +                "phpcs",
    +                "phpmyadmin"
    +            ],
    +            "time": "2017-09-28T09:13:00+00:00"
    +        },
    +        {
    +            "name": "phpspec/prophecy",
    +            "version": "1.8.0",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/phpspec/prophecy.git",
    +                "reference": "4ba436b55987b4bf311cb7c6ba82aa528aac0a06"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/phpspec/prophecy/zipball/4ba436b55987b4bf311cb7c6ba82aa528aac0a06",
    +                "reference": "4ba436b55987b4bf311cb7c6ba82aa528aac0a06",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "doctrine/instantiator": "^1.0.2",
    +                "php": "^5.3|^7.0",
    +                "phpdocumentor/reflection-docblock": "^2.0|^3.0.2|^4.0",
    +                "sebastian/comparator": "^1.1|^2.0|^3.0",
    +                "sebastian/recursion-context": "^1.0|^2.0|^3.0"
    +            },
    +            "require-dev": {
    +                "phpspec/phpspec": "^2.5|^3.2",
    +                "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.5 || ^7.1"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.8.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "psr-0": {
    +                    "Prophecy\\": "src/"
    +                }
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "MIT"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Konstantin Kudryashov",
    +                    "email": "ever.zet@gmail.com",
    +                    "homepage": "http://everzet.com"
    +                },
    +                {
    +                    "name": "Marcello Duarte",
    +                    "email": "marcello.duarte@gmail.com"
    +                }
    +            ],
    +            "description": "Highly opinionated mocking framework for PHP 5.3+",
    +            "homepage": "https://github.com/phpspec/prophecy",
    +            "keywords": [
    +                "Double",
    +                "Dummy",
    +                "fake",
    +                "mock",
    +                "spy",
    +                "stub"
    +            ],
    +            "time": "2018-08-05T17:53:17+00:00"
    +        },
    +        {
    +            "name": "phpunit/php-code-coverage",
    +            "version": "2.2.4",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/sebastianbergmann/php-code-coverage.git",
    +                "reference": "eabf68b476ac7d0f73793aada060f1c1a9bf8979"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/eabf68b476ac7d0f73793aada060f1c1a9bf8979",
    +                "reference": "eabf68b476ac7d0f73793aada060f1c1a9bf8979",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3",
    +                "phpunit/php-file-iterator": "~1.3",
    +                "phpunit/php-text-template": "~1.2",
    +                "phpunit/php-token-stream": "~1.3",
    +                "sebastian/environment": "^1.3.2",
    +                "sebastian/version": "~1.0"
    +            },
    +            "require-dev": {
    +                "ext-xdebug": ">=2.1.4",
    +                "phpunit/phpunit": "~4"
    +            },
    +            "suggest": {
    +                "ext-dom": "*",
    +                "ext-xdebug": ">=2.2.1",
    +                "ext-xmlwriter": "*"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "2.2.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "classmap": [
    +                    "src/"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-3-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Sebastian Bergmann",
    +                    "email": "sb@sebastian-bergmann.de",
    +                    "role": "lead"
    +                }
    +            ],
    +            "description": "Library that provides collection, processing, and rendering functionality for PHP code coverage information.",
    +            "homepage": "https://github.com/sebastianbergmann/php-code-coverage",
    +            "keywords": [
    +                "coverage",
    +                "testing",
    +                "xunit"
    +            ],
    +            "time": "2015-10-06T15:47:00+00:00"
    +        },
    +        {
    +            "name": "phpunit/php-file-iterator",
    +            "version": "1.4.5",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/sebastianbergmann/php-file-iterator.git",
    +                "reference": "730b01bc3e867237eaac355e06a36b85dd93a8b4"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/sebastianbergmann/php-file-iterator/zipball/730b01bc3e867237eaac355e06a36b85dd93a8b4",
    +                "reference": "730b01bc3e867237eaac355e06a36b85dd93a8b4",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.4.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "classmap": [
    +                    "src/"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-3-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Sebastian Bergmann",
    +                    "email": "sb@sebastian-bergmann.de",
    +                    "role": "lead"
    +                }
    +            ],
    +            "description": "FilterIterator implementation that filters files based on a list of suffixes.",
    +            "homepage": "https://github.com/sebastianbergmann/php-file-iterator/",
    +            "keywords": [
    +                "filesystem",
    +                "iterator"
    +            ],
    +            "time": "2017-11-27T13:52:08+00:00"
    +        },
    +        {
    +            "name": "phpunit/php-text-template",
    +            "version": "1.2.1",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/sebastianbergmann/php-text-template.git",
    +                "reference": "31f8b717e51d9a2afca6c9f046f5d69fc27c8686"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/sebastianbergmann/php-text-template/zipball/31f8b717e51d9a2afca6c9f046f5d69fc27c8686",
    +                "reference": "31f8b717e51d9a2afca6c9f046f5d69fc27c8686",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": ">=5.3.3"
    +            },
    +            "type": "library",
    +            "autoload": {
    +                "classmap": [
    +                    "src/"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-3-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Sebastian Bergmann",
    +                    "email": "sebastian@phpunit.de",
    +                    "role": "lead"
    +                }
    +            ],
    +            "description": "Simple template engine.",
    +            "homepage": "https://github.com/sebastianbergmann/php-text-template/",
    +            "keywords": [
    +                "template"
    +            ],
    +            "time": "2015-06-21T13:50:34+00:00"
    +        },
    +        {
    +            "name": "phpunit/php-timer",
    +            "version": "1.0.9",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/sebastianbergmann/php-timer.git",
    +                "reference": "3dcf38ca72b158baf0bc245e9184d3fdffa9c46f"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/sebastianbergmann/php-timer/zipball/3dcf38ca72b158baf0bc245e9184d3fdffa9c46f",
    +                "reference": "3dcf38ca72b158baf0bc245e9184d3fdffa9c46f",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "php": "^5.3.3 || ^7.0"
    +            },
    +            "require-dev": {
    +                "phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.0"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.0-dev"
    +                }
    +            },
    +            "autoload": {
    +                "classmap": [
    +                    "src/"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-3-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Sebastian Bergmann",
    +                    "email": "sb@sebastian-bergmann.de",
    +                    "role": "lead"
    +                }
    +            ],
    +            "description": "Utility class for timing",
    +            "homepage": "https://github.com/sebastianbergmann/php-timer/",
    +            "keywords": [
    +                "timer"
    +            ],
    +            "time": "2017-02-26T11:10:40+00:00"
    +        },
    +        {
    +            "name": "phpunit/php-token-stream",
    +            "version": "1.4.12",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/sebastianbergmann/php-token-stream.git",
    +                "reference": "1ce90ba27c42e4e44e6d8458241466380b51fa16"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/sebastianbergmann/php-token-stream/zipball/1ce90ba27c42e4e44e6d8458241466380b51fa16",
    +                "reference": "1ce90ba27c42e4e44e6d8458241466380b51fa16",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "ext-tokenizer": "*",
    +                "php": ">=5.3.3"
    +            },
    +            "require-dev": {
    +                "phpunit/phpunit": "~4.2"
    +            },
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "1.4-dev"
    +                }
    +            },
    +            "autoload": {
    +                "classmap": [
    +                    "src/"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-3-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Sebastian Bergmann",
    +                    "email": "sebastian@phpunit.de"
    +                }
    +            ],
    +            "description": "Wrapper around PHP's tokenizer extension.",
    +            "homepage": "https://github.com/sebastianbergmann/php-token-stream/",
    +            "keywords": [
    +                "tokenizer"
    +            ],
    +            "time": "2017-12-04T08:55:13+00:00"
    +        },
    +        {
    +            "name": "phpunit/phpunit",
    +            "version": "4.8.36",
    +            "source": {
    +                "type": "git",
    +                "url": "https://github.com/sebastianbergmann/phpunit.git",
    +                "reference": "46023de9a91eec7dfb06cc56cb4e260017298517"
    +            },
    +            "dist": {
    +                "type": "zip",
    +                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/46023de9a91eec7dfb06cc56cb4e260017298517",
    +                "reference": "46023de9a91eec7dfb06cc56cb4e260017298517",
    +                "shasum": ""
    +            },
    +            "require": {
    +                "ext-dom": "*",
    +                "ext-json": "*",
    +                "ext-pcre": "*",
    +                "ext-reflection": "*",
    +                "ext-spl": "*",
    +                "php": ">=5.3.3",
    +                "phpspec/prophecy": "^1.3.1",
    +                "phpunit/php-code-coverage": "~2.1",
    +                "phpunit/php-file-iterator": "~1.4",
    +                "phpunit/php-text-template": "~1.2",
    +                "phpunit/php-timer": "^1.0.6",
    +                "phpunit/phpunit-mock-objects": "~2.3",
    +                "sebastian/comparator": "~1.2.2",
    +                "sebastian/diff": "~1.2",
    +                "sebastian/environment": "~1.3",
    +                "sebastian/exporter": "~1.2",
    +                "sebastian/global-state": "~1.0",
    +                "sebastian/version": "~1.0",
    +                "symfony/yaml": "~2.1|~3.0"
    +            },
    +            "suggest": {
    +                "phpunit/php-invoker": "~1.1"
    +            },
    +            "bin": [
    +                "phpunit"
    +            ],
    +            "type": "library",
    +            "extra": {
    +                "branch-alias": {
    +                    "dev-master": "4.8.x-dev"
    +                }
    +            },
    +            "autoload": {
    +                "classmap": [
    +                    "src/"
    +                ]
    +            },
    +            "notification-url": "https://packagist.org/downloads/",
    +            "license": [
    +                "BSD-3-Clause"
    +            ],
    +            "authors": [
    +                {
    +                    "name": "Sebastian Bergmann",
    +                    "email": "sebastian@phpunit.de",
    +                    "role": "lead"
    +                }
    +            ],
    +            "description": "The PHP Unit Testing framework.",
    +            "homepage": "https://phpunit.de/",
    +   
    ... [truncated]
    
00d90b3ae415

Fix #14548 [security] HTML injection in import warning messages

https://github.com/phpmyadmin/phpmyadminMadhura JayaratneAug 18, 2018via ghsa
2 files changed · +2 1
  • ChangeLog+1 0 modified
    @@ -20,6 +20,7 @@ phpMyAdmin - ChangeLog
     - issue #14554 Icon missing when creating a new trigger, routine, and event
     - issue #14422 Table comment not showing since 4.8.1
     - issue #14426 Drop table doesn't work when you copy tables to another database
    +- issue #14548 [security] HTML injection in import warning messages
     
     4.8.2 (2018-06-21)
     - issue #14370 WHERE 0 causes Fatal error
    
  • libraries/classes/Sql.php+1 1 modified
    @@ -2257,7 +2257,7 @@ public function executeQueryAndGetQueryResponse(array $analyzed_sql_results,
             Util::handleDisableFKCheckCleanup($default_fk_check);
     
             foreach ($warning_messages as $warning) {
    -            $message = Message::notice($warning);
    +            $message = Message::notice(Message::sanitize($warning));
                 $html_output .= $message->getDisplay();
             }
     
    

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

7

News mentions

0

No linked articles in our index yet.