CVE-2018-12613 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-12613 Interim 1 35 2025-11-05T03:28:07Z current 2021-05-30T14:14:35Z 2025-11-05T03:28:07Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-12613 An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the "$cfg['AllowArbitraryServer'] = true" case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the "$cfg['ServerDefault'] = 0" case (which bypasses the login requirement and runs the vulnerable code without any authentication). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PNBWVBIS6L2DQIK7VBQ5WBH5CX2NRCQV/#PNBWVBIS6L2DQIK7VBQ5WBH5CX2NRCQV E-Mail link for openSUSE-SU-2018:1806-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SSVPJZIUNEDYFJOCJJP2R4A5ZQ2SNQAR/#SSVPJZIUNEDYFJOCJJP2R4A5ZQ2SNQAR E-Mail link for openSUSE-SU-2018:1809-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 SUSE Package Hub 12 openSUSE Leap 15.0 openSUSE Tumbleweed kvm phpMyAdmin-4.8.2-23.1 phpMyAdmin-4.8.2-lp150.2.3.1 phpMyAdmin-5.1.1-1.2 phpMyAdmin-apache-5.1.1-1.2 phpMyAdmin-lang-5.1.1-1.2 qemu qemu-arm qemu-audio-alsa qemu-audio-oss qemu-audio-pa qemu-block-curl qemu-block-iscsi qemu-block-rbd qemu-block-ssh qemu-guest-agent qemu-ipxe qemu-kvm qemu-lang qemu-microvm qemu-ppc qemu-s390 qemu-seabios qemu-sgabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-spice-app qemu-vgabios qemu-x86 xen phpMyAdmin-4.8.2-23.1 as a component of SUSE Package Hub 12 phpMyAdmin-4.8.2-lp150.2.3.1 as a component of openSUSE Leap 15.0 phpMyAdmin-5.1.1-1.2 as a component of openSUSE Tumbleweed phpMyAdmin-apache-5.1.1-1.2 as a component of openSUSE Tumbleweed phpMyAdmin-lang-5.1.1-1.2 as a component of openSUSE Tumbleweed qemu as a component of HPE Helion OpenStack 8 qemu-block-curl as a component of HPE Helion OpenStack 8 qemu-block-iscsi as a component of HPE Helion OpenStack 8 qemu-block-rbd as a component of HPE Helion OpenStack 8 qemu-block-ssh as a component of HPE Helion OpenStack 8 qemu-guest-agent as a component of HPE Helion OpenStack 8 qemu-ipxe as a component of HPE Helion OpenStack 8 qemu-kvm as a component of HPE Helion OpenStack 8 qemu-lang as a component of HPE Helion OpenStack 8 qemu-seabios as a component of HPE Helion OpenStack 8 qemu-sgabios as a component of HPE Helion OpenStack 8 qemu-tools as a component of HPE Helion OpenStack 8 qemu-vgabios as a component of HPE Helion OpenStack 8 qemu-x86 as a component of HPE Helion OpenStack 8 qemu as a component of SUSE CaaS Platform 4.0 qemu-audio-alsa as a component of SUSE CaaS Platform 4.0 qemu-audio-oss as a component of SUSE CaaS Platform 4.0 qemu-audio-pa as a component of SUSE CaaS Platform 4.0 qemu-block-curl as a component of SUSE CaaS Platform 4.0 qemu-block-iscsi as a component of SUSE CaaS Platform 4.0 qemu-block-rbd as a component of SUSE CaaS Platform 4.0 qemu-block-ssh as a component of SUSE CaaS Platform 4.0 qemu-guest-agent as a component of SUSE CaaS Platform 4.0 qemu-ipxe as a component of SUSE CaaS Platform 4.0 qemu-kvm as a component of SUSE CaaS Platform 4.0 qemu-lang as a component of SUSE CaaS Platform 4.0 qemu-seabios as a component of SUSE CaaS Platform 4.0 qemu-sgabios as a component of SUSE CaaS Platform 4.0 qemu-tools as a component of SUSE CaaS Platform 4.0 qemu-ui-curses as a component of SUSE CaaS Platform 4.0 qemu-ui-gtk as a component of SUSE CaaS Platform 4.0 qemu-vgabios as a component of SUSE CaaS Platform 4.0 qemu-x86 as a component of SUSE CaaS Platform 4.0 qemu as a component of SUSE Enterprise Storage 6 qemu as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-arm as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-audio-alsa as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-audio-oss as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-audio-pa as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-block-curl as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-block-iscsi as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-block-rbd as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-block-ssh as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-guest-agent as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-ipxe as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-kvm as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-seabios as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-sgabios as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-tools as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-ui-curses as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-ui-gtk as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-vgabios as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-x86 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-arm as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-audio-alsa as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-audio-pa as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-block-curl as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-block-iscsi as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-block-rbd as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-block-ssh as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-guest-agent as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-ipxe as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-kvm as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-lang as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-microvm as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-ppc as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-s390 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-seabios as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-sgabios as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-ui-curses as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-ui-gtk as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-ui-spice-app as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-vgabios as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 qemu-x86 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 kvm as a component of SUSE Linux Enterprise Server 11 SP4 LTSS xen as a component of SUSE Linux Enterprise Server 11 SP4 LTSS qemu as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-block-curl as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-block-rbd as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-block-ssh as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-guest-agent as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-ipxe as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-kvm as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-lang as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-seabios as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-sgabios as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-tools as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-vgabios as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-x86 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-arm as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-block-curl as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-block-iscsi as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-block-rbd as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-block-ssh as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-guest-agent as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-ipxe as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-kvm as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-lang as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-seabios as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-sgabios as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-tools as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-vgabios as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu-x86 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS qemu as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-arm as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-block-curl as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-block-iscsi as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-block-rbd as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-block-ssh as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-guest-agent as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-ipxe as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-kvm as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-lang as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-ppc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-s390 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-seabios as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-sgabios as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-tools as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-vgabios as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-x86 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-arm as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-audio-alsa as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-audio-oss as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-audio-pa as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-block-curl as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-block-iscsi as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-block-rbd as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-block-ssh as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-guest-agent as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ipxe as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-kvm as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-lang as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ppc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-s390 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-seabios as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-sgabios as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-tools as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ui-curses as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ui-gtk as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-vgabios as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-x86 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 qemu as a component of SUSE Linux Enterprise Server Teradata 12 SP3 qemu as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-curl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-iscsi as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-rbd as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-ssh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-guest-agent as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-ipxe as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-kvm as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-lang as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-ppc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-seabios as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-sgabios as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-tools as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-vgabios as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-x86 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-audio-alsa as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-audio-oss as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-audio-pa as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-block-curl as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-block-iscsi as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-block-rbd as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-block-ssh as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-guest-agent as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-ipxe as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-kvm as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-ppc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-seabios as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-sgabios as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-ui-curses as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-ui-gtk as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-vgabios as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-x86 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu as a component of SUSE Manager Proxy 4.0 qemu as a component of SUSE Manager Retail Branch Server 4.0 qemu as a component of SUSE Manager Server 4.0 qemu as a component of SUSE OpenStack Cloud 8 qemu-block-curl as a component of SUSE OpenStack Cloud 8 qemu-block-iscsi as a component of SUSE OpenStack Cloud 8 qemu-block-rbd as a component of SUSE OpenStack Cloud 8 qemu-block-ssh as a component of SUSE OpenStack Cloud 8 qemu-guest-agent as a component of SUSE OpenStack Cloud 8 qemu-ipxe as a component of SUSE OpenStack Cloud 8 qemu-kvm as a component of SUSE OpenStack Cloud 8 qemu-lang as a component of SUSE OpenStack Cloud 8 qemu-seabios as a component of SUSE OpenStack Cloud 8 qemu-sgabios as a component of SUSE OpenStack Cloud 8 qemu-tools as a component of SUSE OpenStack Cloud 8 qemu-vgabios as a component of SUSE OpenStack Cloud 8 qemu-x86 as a component of SUSE OpenStack Cloud 8 qemu as a component of SUSE OpenStack Cloud 9 qemu-block-curl as a component of SUSE OpenStack Cloud 9 qemu-block-iscsi as a component of SUSE OpenStack Cloud 9 qemu-block-rbd as a component of SUSE OpenStack Cloud 9 qemu-block-ssh as a component of SUSE OpenStack Cloud 9 qemu-guest-agent as a component of SUSE OpenStack Cloud 9 qemu-ipxe as a component of SUSE OpenStack Cloud 9 qemu-kvm as a component of SUSE OpenStack Cloud 9 qemu-lang as a component of SUSE OpenStack Cloud 9 qemu-seabios as a component of SUSE OpenStack Cloud 9 qemu-sgabios as a component of SUSE OpenStack Cloud 9 qemu-tools as a component of SUSE OpenStack Cloud 9 qemu-vgabios as a component of SUSE OpenStack Cloud 9 qemu-x86 as a component of SUSE OpenStack Cloud 9 qemu as a component of SUSE OpenStack Cloud Crowbar 8 qemu-block-curl as a component of SUSE OpenStack Cloud Crowbar 8 qemu-block-iscsi as a component of SUSE OpenStack Cloud Crowbar 8 qemu-block-rbd as a component of SUSE OpenStack Cloud Crowbar 8 qemu-block-ssh as a component of SUSE OpenStack Cloud Crowbar 8 qemu-guest-agent as a component of SUSE OpenStack Cloud Crowbar 8 qemu-ipxe as a component of SUSE OpenStack Cloud Crowbar 8 qemu-kvm as a component of SUSE OpenStack Cloud Crowbar 8 qemu-lang as a component of SUSE OpenStack Cloud Crowbar 8 qemu-seabios as a component of SUSE OpenStack Cloud Crowbar 8 qemu-sgabios as a component of SUSE OpenStack Cloud Crowbar 8 qemu-tools as a component of SUSE OpenStack Cloud Crowbar 8 qemu-vgabios as a component of SUSE OpenStack Cloud Crowbar 8 qemu-x86 as a component of SUSE OpenStack Cloud Crowbar 8 qemu as a component of SUSE OpenStack Cloud Crowbar 9 qemu-block-curl as a component of SUSE OpenStack Cloud Crowbar 9 qemu-block-iscsi as a component of SUSE OpenStack Cloud Crowbar 9 qemu-block-rbd as a component of SUSE OpenStack Cloud Crowbar 9 qemu-block-ssh as a component of SUSE OpenStack Cloud Crowbar 9 qemu-guest-agent as a component of SUSE OpenStack Cloud Crowbar 9 qemu-ipxe as a component of SUSE OpenStack Cloud Crowbar 9 qemu-kvm as a component of SUSE OpenStack Cloud Crowbar 9 qemu-lang as a component of SUSE OpenStack Cloud Crowbar 9 qemu-seabios as a component of SUSE OpenStack Cloud Crowbar 9 qemu-sgabios as a component of SUSE OpenStack Cloud Crowbar 9 qemu-tools as a component of SUSE OpenStack Cloud Crowbar 9 qemu-vgabios as a component of SUSE OpenStack Cloud Crowbar 9 qemu-x86 as a component of SUSE OpenStack Cloud Crowbar 9 An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the server. The vulnerability comes from a portion of code where pages are redirected and loaded within phpMyAdmin, and an improper test for whitelisted pages. An attacker must be authenticated, except in the "$cfg['AllowArbitraryServer'] = true" case (where an attacker can specify any host he/she is already in control of, and execute arbitrary code on phpMyAdmin) and the "$cfg['ServerDefault'] = 0" case (which bypasses the login requirement and runs the vulnerable code without any authentication). CVE-2018-12613 SUSE Package Hub 12:phpMyAdmin-4.8.2-23.1 openSUSE Leap 15.0:phpMyAdmin-4.8.2-lp150.2.3.1 openSUSE Tumbleweed:phpMyAdmin-5.1.1-1.2 openSUSE Tumbleweed:phpMyAdmin-apache-5.1.1-1.2 openSUSE Tumbleweed:phpMyAdmin-lang-5.1.1-1.2 SUSE CaaS Platform 4.0:qemu SUSE CaaS Platform 4.0:qemu-audio-alsa SUSE CaaS Platform 4.0:qemu-audio-oss SUSE CaaS Platform 4.0:qemu-audio-pa SUSE CaaS Platform 4.0:qemu-block-curl SUSE CaaS Platform 4.0:qemu-block-iscsi SUSE CaaS Platform 4.0:qemu-block-rbd SUSE CaaS Platform 4.0:qemu-block-ssh SUSE CaaS Platform 4.0:qemu-guest-agent SUSE CaaS Platform 4.0:qemu-ipxe SUSE CaaS Platform 4.0:qemu-kvm SUSE CaaS Platform 4.0:qemu-lang SUSE CaaS Platform 4.0:qemu-seabios SUSE CaaS Platform 4.0:qemu-sgabios SUSE CaaS Platform 4.0:qemu-tools SUSE CaaS Platform 4.0:qemu-ui-curses SUSE CaaS Platform 4.0:qemu-ui-gtk SUSE CaaS Platform 4.0:qemu-vgabios SUSE CaaS Platform 4.0:qemu-x86 SUSE Enterprise Storage 6:qemu SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-arm SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-audio-alsa SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-audio-oss SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-audio-pa SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-block-curl SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-block-iscsi SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-block-rbd SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-block-ssh SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-guest-agent SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-ipxe SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-kvm SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-lang SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-seabios SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-sgabios SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-tools SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-ui-curses SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-ui-gtk SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-vgabios SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-x86 SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390 SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86 SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-arm SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-block-curl SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-block-iscsi SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-block-rbd SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-block-ssh SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-guest-agent SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-ipxe SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-kvm SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-lang SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-seabios SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-sgabios SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-tools SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-vgabios SUSE Linux Enterprise Server 12 SP4-ESPOS:qemu-x86 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-arm SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-audio-alsa SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-audio-oss SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-audio-pa SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-block-curl SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-block-iscsi SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-block-rbd SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-block-ssh SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-guest-agent SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ipxe SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-kvm SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-lang SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ppc SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-s390 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-seabios SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-sgabios SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-tools SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ui-curses SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ui-gtk SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-vgabios SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-x86 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:qemu SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-audio-alsa SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-audio-oss SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-audio-pa SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-block-curl SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-block-iscsi SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-block-rbd SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-block-ssh SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-guest-agent SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-ipxe SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-kvm SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-lang SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-ppc SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-seabios SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-sgabios SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-tools SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-ui-curses SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-ui-gtk SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-vgabios SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-x86 SUSE Manager Proxy 4.0:qemu SUSE Manager Retail Branch Server 4.0:qemu SUSE Manager Server 4.0:qemu SUSE OpenStack Cloud 9:qemu SUSE OpenStack Cloud 9:qemu-block-curl SUSE OpenStack Cloud 9:qemu-block-iscsi SUSE OpenStack Cloud 9:qemu-block-rbd SUSE OpenStack Cloud 9:qemu-block-ssh SUSE OpenStack Cloud 9:qemu-guest-agent SUSE OpenStack Cloud 9:qemu-ipxe SUSE OpenStack Cloud 9:qemu-kvm SUSE OpenStack Cloud 9:qemu-lang SUSE OpenStack Cloud 9:qemu-seabios SUSE OpenStack Cloud 9:qemu-sgabios SUSE OpenStack Cloud 9:qemu-tools SUSE OpenStack Cloud 9:qemu-vgabios SUSE OpenStack Cloud 9:qemu-x86 SUSE OpenStack Cloud Crowbar 9:qemu SUSE OpenStack Cloud Crowbar 9:qemu-block-curl SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent SUSE OpenStack Cloud Crowbar 9:qemu-ipxe SUSE OpenStack Cloud Crowbar 9:qemu-kvm SUSE OpenStack Cloud Crowbar 9:qemu-lang SUSE OpenStack Cloud Crowbar 9:qemu-seabios SUSE OpenStack Cloud Crowbar 9:qemu-sgabios SUSE OpenStack Cloud Crowbar 9:qemu-tools SUSE OpenStack Cloud Crowbar 9:qemu-vgabios SUSE OpenStack Cloud Crowbar 9:qemu-x86 moderate 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H