[Git][security-tracker-team/security-tracker][master] Add CVE-2020-26934/phpmyadmin

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7060e935 by Salvatore Bonaccorso at 2020-10-10T22:35:09+02:00
Add CVE-2020-26934/phpmyadmin

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15,7 +15,9 @@ CVE-2020-26935 (An issue was discovered in SearchController in phpMyAdmin before
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2020-6/
 	NOTE: https://github.com/phpmyadmin/phpmyadmin/commit/d09ab9bc9d634ad08b866d42bb8c4109869d38d2
 CVE-2020-26934 (phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the tr ...)
-	TODO: check
+	- phpmyadmin <unfixed>
+	NOTE: https://www.phpmyadmin.net/security/PMASA-2020-5/
+	NOTE: https://github.com/phpmyadmin/phpmyadmin/commit/19df63b0365621427697edc185ff7c9c5707c523
 CVE-2020-26933
 	RESERVED
 CVE-2020-26931 (Certain NETGEAR devices are affected by disclosure of sensitive inform ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7060e935845f24b9009fa58373e4b51fe826c1e7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7060e935845f24b9009fa58373e4b51fe826c1e7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201010/28049b09/attachment.html>