CVE:CVE-2020-26934
CNNVD:CNNVD-202010-385
phpMyAdmin是phpMyAdmin团队的一套免费的、基于Web的MySQL数据库管理工具。该工具能够创建和删除数据库，创建、删除、修改数据库表，执行SQL脚本命令等。
phpMyAdmin 4.9.6之前版本，5.x到5.0.3版本存在跨站脚本漏洞，该漏洞允许攻击者用精心设计的链接通过转换功能发起攻击。
solution:Upgrade phpmyadmin phpmyadmin to a higher version than 4.9.6,5.0.3,and avoid the version [4.9.0,4.9.6),[5.0.0,5.0.3); Upgrade opensuse backports_sle to a higher version than 15.0,15.0:sp1,15.0:sp2,and avoid the version 15.0,15.0:sp1,15.0:sp2; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade fedoraproject fedora to a higher version than 31,32,33,and avoid the version 31,32,33; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0