What is CVE-2019-6798?

CVE-2019-6798 is a vulnerability in phpMyAdmin before version 4.8.5 that allows a specially crafted username to trigger a SQL injection attack through the designer feature.

What is the severity of CVE-2019-6798?

CVE-2019-6798 has a severity rating of 9.8 out of 10, which is classified as critical.

How does CVE-2019-6798 affect phpMyAdmin?

CVE-2019-6798 affects phpMyAdmin versions between 4.5.0 and 4.8.4, allowing a SQL injection attack using a specially crafted username in the designer feature.

Is there a fix for CVE-2019-6798?

Yes, the vulnerability has been fixed in phpMyAdmin version 4.8.5 or later. It is recommended to upgrade to the latest version.

Where can I find more information about CVE-2019-6798?

You can find more information about CVE-2019-6798 on the following references: http://www.securityfocus.com/bid/106727, https://www.phpmyadmin.net/security/PMASA-2019-2/

Vulnerability/
CVE-2019-6798

critical

9.8

CWE

26/1/2019

14/5/2022

21/11/2024

CVE-2019-6798: SQL Injection

First published: Sat Jan 26 2019(Updated: )

An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
composer/phpmyadmin/phpmyadmin	<4.8.5	4.8.5
PhpMyAdmin	>=4.5.0<=4.8.4

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2019-6798?
CVE-2019-6798 is a vulnerability in phpMyAdmin before version 4.8.5 that allows a specially crafted username to trigger a SQL injection attack through the designer feature.
What is the severity of CVE-2019-6798?
CVE-2019-6798 has a severity rating of 9.8 out of 10, which is classified as critical.
How does CVE-2019-6798 affect phpMyAdmin?
CVE-2019-6798 affects phpMyAdmin versions between 4.5.0 and 4.8.4, allowing a SQL injection attack using a specially crafted username in the designer feature.
Is there a fix for CVE-2019-6798?
Yes, the vulnerability has been fixed in phpMyAdmin version 4.8.5 or later. It is recommended to upgrade to the latest version.
Where can I find more information about CVE-2019-6798?
You can find more information about CVE-2019-6798 on the following references: http://www.securityfocus.com/bid/106727, https://www.phpmyadmin.net/security/PMASA-2019-2/

agent/type
collector/github-advisory-latest
source/GitHub
alias/GHSA-f732-fxh6-g4qj
alias/CVE-2019-6798
agent/software-canonical-lookup
agent/severity
agent/weakness
agent/references
agent/description
agent/author
agent/softwarecombine
collector/github-advisory
collector/mitre-cve
source/MITRE
agent/first-publish-date
agent/last-modified-date
agent/event
agent/trending
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup-request
collector/nvd-cve
collector/nvd-index
package-manager/composer
vendor/phpmyadmin
canonical/phpmyadmin
version/phpmyadmin/4.5.0
version/phpmyadmin/4.8.4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.