Moderate severityNVD Advisory· Published Oct 10, 2020· Updated Aug 4, 2024
CVE-2020-26934
CVE-2020-26934
Description
phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
phpmyadmin/phpmyadminPackagist | >= 4.9.0, < 4.9.6 | 4.9.6 |
phpmyadmin/phpmyadminPackagist | >= 5.0.0, < 5.0.3 | 5.0.3 |
Affected products
10- phpMyAdmin/phpMyAdmindescription
- osv-coords9 versionspkg:bitnami/phpmyadminpkg:composer/phpmyadmin/phpmyadminpkg:rpm/opensuse/phpMyAdmin&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/phpMyAdmin&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/phpMyAdmin&distro=openSUSE%20Tumbleweedpkg:rpm/suse/phpMyAdmin&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/phpMyAdmin&distro=SUSE%20Package%20Hub%2015pkg:rpm/suse/phpMyAdmin&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/phpMyAdmin&distro=SUSE%20Package%20Hub%2015%20SP2
>= 4.9.0, < 4.9.6+ 8 more
- (no CPE)range: >= 4.9.0, < 4.9.6
- (no CPE)range: >= 4.9.0, < 4.9.6
- (no CPE)range: < 4.9.6-bp152.2.3.1
- (no CPE)range: < 4.9.6-bp152.2.3.1
- (no CPE)range: < 5.1.1-1.2
- (no CPE)range: < 4.9.6-bp152.2.3.1
- (no CPE)range: < 4.9.7-bp151.3.24.1
- (no CPE)range: < 4.9.6-bp152.2.3.1
- (no CPE)range: < 4.9.6-bp152.2.3.1
Patches
Vulnerability mechanics
References
18- lists.opensuse.org/opensuse-security-announce/2020-10/msg00027.htmlghsavendor-advisoryx_refsource_SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2020-11/msg00005.htmlghsavendor-advisoryx_refsource_SUSEWEB
- github.com/advisories/GHSA-6349-53vr-7hcrghsaADVISORY
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHST4E5IJG7IKZTTW3R6MEZPVHJZ472K/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PXK37YEHSDYCIPQSYEMN2OFTP2ZLM7DO/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNLGHVDNAEZEGRTUESSSQFM7MZTHIDQ5/mitrevendor-advisoryx_refsource_FEDORA
- nvd.nist.gov/vuln/detail/CVE-2020-26934ghsaADVISORY
- security.gentoo.org/glsa/202101-35ghsavendor-advisoryx_refsource_GENTOOWEB
- github.com/FriendsOfPHP/security-advisories/blob/master/phpmyadmin/phpmyadmin/CVE-2020-26934.yamlghsaWEB
- lists.debian.org/debian-lts-announce/2020/10/msg00024.htmlghsamailing-listx_refsource_MLISTWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHST4E5IJG7IKZTTW3R6MEZPVHJZ472KghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PXK37YEHSDYCIPQSYEMN2OFTP2ZLM7DOghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNLGHVDNAEZEGRTUESSSQFM7MZTHIDQ5ghsaWEB
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FHST4E5IJG7IKZTTW3R6MEZPVHJZ472KghsaWEB
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXK37YEHSDYCIPQSYEMN2OFTP2ZLM7DOghsaWEB
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNLGHVDNAEZEGRTUESSSQFM7MZTHIDQ5ghsaWEB
- www.phpmyadmin.net/security/PMASA-2020-5ghsaWEB
- www.phpmyadmin.net/security/PMASA-2020-5/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.