CVE-2018-19970
phpmyadmin: In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a pa...
CVE-2018-19970 is fixed in phpmyadmin on 1 platform by phpmyadmin 4:4.6.6-5ubuntu0.5 (version 4:4.6.6-5ubuntu0.5), released October 10, 2020. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0224
82nd percentile
In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| phpmyadmin · Ubuntu 18.04.6 LTS (bionic) | 4:4.6.6-5ubuntu0.5 | phpmyadmin 4:4.6.6-5ubuntu0.5 | Oct 10, 2020 |