CVE-2019-6798
CRITICALPhpmyadmin < 4.8.4 - SQL Injection
Title source: ruleDescription
An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature.
Scores
CVSS v3
9.8
EPSS
0.0054
EPSS Percentile
67.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-89
Status
published
Affected Products (2)
phpmyadmin/phpmyadmin
< 4.8.4
phpmyadmin/phpmyadmin
< 4.8.5Packagist
Timeline
Published
Jan 26, 2019
Tracked Since
Feb 18, 2026