An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) to the victim.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-06-05T04:27:12
Updated: 2024-08-04T23:24:39.192Z
Reserved: 2019-06-03T00:00:00
Link: CVE-2019-12616
Vulnrichment
No data.
NVD
Status : Modified
Published: 2019-06-05T05:29:00.510
Modified: 2023-11-07T03:03:38.810
Link: CVE-2019-12616
Redhat
No data.