Threats tagged 'ghsa-5vv2-vq4f-4f39'

phpMyAdmin versions through 5.2.3 have a cross-site request forgery (CSRF) vulnerability that allows remote attackers to execute arbitrary SQL commands by bypassing CSRF token checks on non-AJAX POST requests. This enables attackers to trick authenticated users into submitting malicious SQL queries, which run with the victim's database privileges under HTTP or config authentication.