Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

CVE-2019-12922 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2019-12922

CVE-2019-12922

MEDIUM6.5

A CSRF issue in phpMyAdmin 4

Published Sep 13, 2019

Modified 1 years ago

Details

A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00078.html

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00024.html

WEB

http://packetstormsecurity.com/files/154483/phpMyAdmin-4.9.0.1-Cross-Site-Request-Forgery.html

WEB

http://seclists.org/fulldisclosure/2019/Sep/23

WEB

https://github.com/phpmyadmin/phpmyadmin/commit/427fbed55d3154d96ecfc1c7784d49eaa3c04161

WEB

https://github.com/phpmyadmin/phpmyadmin/commit/7d21d4223bdbe0306593309132b4263d7087d13b

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PBLBE6CSC2ZLINIRBUU5XBLXYVBTF3KA/

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QJ5BW2VEMD2P23ZYRWHDBEQHOKGKGWD6/

ADVISORY

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YCB3PTGHZ7AJCM6BKCQRRP6HG3OKYCMN/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2019-12922

DETECTION

https://www.exploit-db.com/exploits/47385

CVSS Analysis

CVSS v3.1

6.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

HighI:H

Availability

NoneA:N

6.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Ecosystems

Timeline

PublishedSep 13, 2019

ModifiedAug 4, 2024