Description
phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 13 | | =4:5.2.2-really+dfsg-1 || =4:5.2.2-really+dfsg-1+deb13u1 || =4:5.2.2-really+dfsg-2 || =4:5.2.3+dfsg-1 || =4:5.2.4~dev~git20260809.e0909b211b+dfsg-1 |
debian 12 | | =4:5.2.1+dfsg-1 || =4:5.2.1+dfsg-1+deb12u1 || =4:5.2.1+dfsg-2 || =4:5.2.1+dfsg-3 || =4:5.2.1+dfsg-4 || =4:5.2.2-dev+759fe912a-1 || =4:5.2.2-really+dfsg-1 || =4:5.2.2-really+dfsg-2 || =4:5.2.2-really5.2.2+20241130+dfsg-1 || =4:5.2.2-really5.2.2+20241228+dfsg-1 || =4:5.2.2-really5.2.2+20250114+dfsg-1 || =4:5.2.2-really5.2.2+20250121+dfsg-1 || =4:5.2.3+dfsg-1 || =4:5.2.4~dev~git20260809.e0909b211b+dfsg-1 |
debian 11 | | =4:5.0.4+dfsg2-2 || =4:5.0.4+dfsg2-2+deb11u1 || =4:5.0.4+dfsg2-2+deb11u2 || =4:5.1.1+dfsg1-1 || =4:5.1.1+dfsg1-2 || =4:5.1.1+dfsg1-3 || =4:5.1.1+dfsg1-4 || =4:5.1.1+dfsg1-4~bpo11+1 || =4:5.1.1+dfsg1-5 || =4:5.1.3+dfsg1-1 || =4:5.1.4+dfsg1-1 || =4:5.1.4+dfsg1-1~bpo11+1 || =4:5.1.4+dfsg1-2 || =4:5.1.4+dfsg1-2~bpo11+1 || =4:5.1.4+dfsg1-3 || =4:5.2.0+dfsg1-1 || =4:5.2.0+dfsg1-2 || =4:5.2.1+dfsg-1 || =4:5.2.1+dfsg-1~bpo11+1 || =4:5.2.1+dfsg-2 || =4:5.2.1+dfsg-3 || =4:5.2.1+dfsg-4 || =4:5.2.2-dev+759fe912a-1 || =4:5.2.2-really+dfsg-1 || =4:5.2.2-really+dfsg-2 || =4:5.2.2-really5.2.2+20241130+dfsg-1 || =4:5.2.2-really5.2.2+20241228+dfsg-1 || =4:5.2.2-really5.2.2+20250114+dfsg-1 || =4:5.2.2-really5.2.2+20250121+dfsg-1 || =4:5.2.3+dfsg-1 || =4:5.2.4~dev~git20260809.e0909b211b+dfsg-1 |
 packagist | | |
debian 14 | | =4:5.2.2-really+dfsg-1 || =4:5.2.2-really+dfsg-2 || =4:5.2.3+dfsg-1 || =4:5.2.4~dev~git20260809.e0909b211b+dfsg-1 |
