-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.6, < 4.6.6 | 4.6.6 |
| phpmyadmin/phpmyadmin | composer | >= 4.4, < 4.4.15.10 | 4.4.15.10 |
| phpmyadmin/phpmyadmin | composer | >= 4.0, < 4.0.10.19 | 4.0.10.19 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper validation of user input in table editing parameters that control template inclusion. The patches added validation to prevent recursive includes, indicating the vulnerable functions were in the table editing workflow and template rendering system. The primary function (getHtmlForEditTable) directly processes user input for table operations, while Template::render handles recursive template processing. Both would appear in stack traces during exploitation as they process the malicious parameters triggering the recursive include.