{"id":2808,"date":"2018-01-02T10:49:01","date_gmt":"2018-01-02T16:49:01","guid":{"rendered":"http:\/\/www.the-internet-guy.com\/?p=2808"},"modified":"2018-01-02T10:49:01","modified_gmt":"2018-01-02T16:49:01","slug":"critical-flaw-reported-in-phpmyadmin-lets-attackers-damage-databases","status":"publish","type":"post","link":"https:\/\/www.the-internet-guy.com\/?p=2808","title":{"rendered":"Critical Flaw Reported In phpMyAdmin Lets Attackers Damage Databases"},"content":{"rendered":"

\"\"<\/a><\/p>\n

A critical security vulnerability has been reported in phpMyAdmin\u2014one of the most popular applications for managing the MySQL database\u2014which could allow remote attackers to perform dangerous database operations just by tricking administrators into clicking a link.<\/p>\n

Discovered by an Indian security researcher,\u00a0Ashutosh Barot<\/a>, the vulnerability is a cross-site request forgery (CSRF) attack and affects phpMyAdmin versions 4.7.x (prior to 4.7.7<\/i>).<\/p>\n

Cross-site request forgery vulnerability, also known as XSRF, is an attack wherein an attacker tricks an authenticated user into executing an unwanted action.<\/p><\/blockquote>\n

Read more here<\/a>.<\/p>\n

<\/div>\n

<\/path><\/svg><\/i> \"Loading\"<\/p>\n

<\/div>\n","protected":false},"excerpt":{"rendered":"

A critical security vulnerability has been reported in phpMyAdmin\u2014one of the most popular applications for managing the MySQL database\u2014which could allow remote attackers to perform dangerous database operations just by tricking administrators into clicking a link. Discovered by an Indian security researcher,\u00a0Ashutosh Barot, the vulnerability is a cross-site request forgery…<\/p>\n

Read More<\/a><\/p>\n

<\/div>\n

<\/path><\/svg><\/i> \"Loading\"<\/p>\n

<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"enabled":false},"version":2}},"categories":[1],"tags":[],"class_list":["post-2808","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=\/wp\/v2\/posts\/2808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2808"}],"version-history":[{"count":1,"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=\/wp\/v2\/posts\/2808\/revisions"}],"predecessor-version":[{"id":2810,"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=\/wp\/v2\/posts\/2808\/revisions\/2810"}],"wp:attachment":[{"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.the-internet-guy.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}