CVE-2026-119426

Mô tả

Tham khảo

• abraxaslabs.tech/research/phpmyadmin-csrf-sql · Exploit
• phpmyadmin/phpmyadmin · Product
• phpmyadmin/phpmyadmin · Product
• phpmyadmin/phpmyadmin commit 9103223 · Patch
• phpmyadmin/phpmyadmin commit d1e2b54 · Patch
• phpmyadmin/phpmyadmin#20569 · Patch
• vulncheck.com/advisories/phpmyadmin-through-5.2.3-csrf-token-bypass-via-non-ajax-post-to-sql · Patch

Lỗ hổng khác của phpmyadmin

• CVE-2026-119563TRUNG BÌNH 5.4phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject scr…
• CVE-2026-119562CAO 8.8phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by supplying unescaped col_ex…
• CVE-2026-119561CAO 8.1phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse() that never ver…
• CVE-2026-119429TRUNG BÌNH 4.3phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remove two-factor authent…
• CVE-2026-119428TRUNG BÌNH 5.8phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound conn…