Critical severity9.8NVD Advisory· Published Dec 6, 2019· Updated Jun 17, 2026

CVE-2019-19617

Description

phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
phpmyadmin/phpmyadminPackagist	< 4.9.2	4.9.2

Affected products

PhpMyAdmin/phpMyAdmin
cpe:2.3:a:phpmyadmin:phpmyadmin:*:*:*:*:*:*:*:*
Range: <4.9.2
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
phpMyAdmin/phpMyAdmindescription
ghsa-coords
pkg:composer/phpmyadmin/phpmyadmin
Range: < 4.9.2

Patches

Vulnerability mechanics

References

github.com/phpmyadmin/phpmyadmin/commit/1119de642b136d20e810bb20f545069a01dd7cc9nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-pgph-mc4p-f8c3ghsaADVISORY
github.com/phpmyadmin/phpmyadmin/compare/RELEASE_4_9_1...RELEASE_4_9_2nvdRelease NotesThird Party AdvisoryWEB
lists.debian.org/debian-lts-announce/2019/12/msg00006.htmlnvdMailing ListThird Party AdvisoryWEB
lists.debian.org/debian-lts-announce/2020/10/msg00024.htmlnvdMailing ListThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2019-19617ghsaADVISORY
www.phpmyadmin.net/news/2019/11/22/phpmyadmin-492-released/nvdRelease NotesVendor Advisory
www.phpmyadmin.net/news/2019/11/22/phpmyadmin-492-releasedghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000