phpMyAdmin: Multiple vulnerabilities

phpMyAdmin: Multiple vulnerabilities Multiple vulnerabilities have been found in phpMyAdmin, the worst of which could lead to arbitrary code execution. phpMyAdmin 2015-05-31 2016-05-14 517858 522844 530054 remote 4.2.13 4.1.14.7 4.0.10.6 4.0.10.15 4.0.10.16 4.0.10.17 4.0.10.18 4.2.13

phpMyAdmin is a web-based management tool for MySQL databases.

Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details.

A remote authenticated attacker could exploit these vulnerabilities to include and execute arbitrary local files via a crafted parameter, inject SQL code, or to conduct Cross-Site Scripting attacks.

There is no known workaround at this time.

All phpMyAdmin 4.2 users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.2.13"

All phpMyAdmin 4.1 users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.1.14.7"

All phpMyAdmin 4.0 users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=dev-db/phpmyadmin-4.0.10.6"

CVE-2014-4986 CVE-2014-4987 CVE-2014-6300 CVE-2014-8958 CVE-2014-8959 CVE-2014-8960 CVE-2014-8961 K_F BlueKnight