phpMyAdmin: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Summary

Product

Vulnerabilities 2

• Medium 6.4
  CVE-2025-24529

  An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the Insert tab.

  phpMyAdmin phpMyAdmin phpmyadmin phpmyadmin Debian Ubuntu
  Jan 23, 2025
• Medium 6.4
  CVE-2025-24530

  phpMyAdmin XSS when checking tables

  An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS.

  phpMyAdmin phpMyAdmin phpmyadmin phpmyadmin Debian Ubuntu Packagist
  Jan 23, 2025

Revision history

1. 2025-04-08 #4

   Neue Updates von Debian aufgenommen

2. 2025-03-03 #3

   Neue Updates von openSUSE aufgenommen

3. 2025-01-22 #2

   CVE-Nummern ergänzt

4. 2025-01-21 #1

   Initiale Fassung

References

• phpMyAdmin Security Advisory vom 2025-01-21
  https://www.phpmyadmin.net/security/PMASA-2025-1/
• phpMyAdmin Security Advisory vom 2025-01-21
  https://www.phpmyadmin.net/security/PMASA-2025-2/
• openSUSE Security Update OPENSUSE-SU-2025:0081-1 vom 2025-03-03
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/472PX6IZ26ALBE66YKBJD3XTN7M34U4L/
• Debian Security Advisory DLA-4121 vom 2025-04-08
  https://lists.debian.org/debian-lts-announce/2025/04/msg00016.html