Shared security patch analysis results
AI Used: deepseek deepseek-chat--- cache/phpmyadmin_RELEASE_4_9_10/ChangeLog 2025-10-27 16:59:44.526378984 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/ChangeLog 2025-10-27 16:59:48.202613280 +0000@@ -1,6 +1,9 @@ phpMyAdmin - ChangeLog ====================== +4.9.11 (2023-02-07)+- issue [security] Fix an XSS attack through the drag-and-drop upload feature+ 4.9.10 (2022-02-10) - issue #17308 Fix broken pagination links in the navigation sidebar
Vulnerability Existed: yes
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - File: ChangeLog (and related code files not shown in diff) Lines: Not specified in diff
Old Code: Not provided in diff
Fixed Code: Not provided in diff
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/README 2025-10-27 16:59:44.526378984 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/README 2025-10-27 16:59:48.202613280 +0000@@ -1,7 +1,7 @@ phpMyAdmin - Readme =================== -Version 4.9.10+Version 4.9.11 A web interface for MySQL and MariaDB.
Vulnerability Existed: no No vulnerabilities found in the provided diff. The change is a version update in the README file.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/composer.lock 2025-10-27 16:59:44.526378984 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/composer.lock 2025-10-27 16:59:48.202613280 +0000@@ -177,23 +177,23 @@ }, { "name": "paragonie/random_compat",- "version": "v2.0.20",+ "version": "v2.0.21", "source": { "type": "git", "url": "https://github.com/paragonie/random_compat.git",- "reference": "0f1f60250fccffeaf5dda91eea1c018aed1adc2a"+ "reference": "96c132c7f2f7bc3230723b66e89f8f150b29d5ae" }, "dist": { "type": "zip",- "url": "https://api.github.com/repos/paragonie/random_compat/zipball/0f1f60250fccffeaf5dda91eea1c018aed1adc2a",- "reference": "0f1f60250fccffeaf5dda91eea1c018aed1adc2a",+ "url": "https://api.github.com/repos/paragonie/random_compat/zipball/96c132c7f2f7bc3230723b66e89f8f150b29d5ae",+ "reference": "96c132c7f2f7bc3230723b66e89f8f150b29d5ae", "shasum": "" }, "require": { "php": ">=5.2.0" }, "require-dev": {- "phpunit/phpunit": "4.*|5.*"+ "phpunit/phpunit": "*" }, "suggest": { "ext-libsodium": "Provides a modern crypto API that can be used to generate random bytes."@@ -227,7 +227,7 @@ "issues": "https://github.com/paragonie/random_compat/issues", "source": "https://github.com/paragonie/random_compat" },- "time": "2021-04-17T09:33:01+00:00"+ "time": "2022-02-16T17:07:03+00:00" }, { "name": "phpmyadmin/motranslator",@@ -408,16 +408,16 @@ }, { "name": "phpseclib/phpseclib",- "version": "2.0.36",+ "version": "2.0.41", "source": { "type": "git", "url": "https://github.com/phpseclib/phpseclib.git",- "reference": "a97547126396548c224703a267a30af1592be146"+ "reference": "7e763c6f97ec1fcb37c46aa8ecfc20a2c71d9c1b" }, "dist": { "type": "zip",- "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/a97547126396548c224703a267a30af1592be146",- "reference": "a97547126396548c224703a267a30af1592be146",+ "url": "https://api.github.com/repos/phpseclib/phpseclib/zipball/7e763c6f97ec1fcb37c46aa8ecfc20a2c71d9c1b",+ "reference": "7e763c6f97ec1fcb37c46aa8ecfc20a2c71d9c1b", "shasum": "" }, "require": {@@ -432,7 +432,8 @@ "ext-gmp": "Install the GMP (GNU Multiple Precision) extension in order to speed up arbitrary precision integer arithmetic operations.", "ext-libsodium": "SSH2/SFTP can make use of some algorithms provided by the libsodium-php extension.", "ext-mcrypt": "Install the Mcrypt extension in order to speed up a few other cryptographic operations.",- "ext-openssl": "Install the OpenSSL extension in order to speed up a wide variety of cryptographic operations."+ "ext-openssl": "Install the OpenSSL extension in order to speed up a wide variety of cryptographic operations.",+ "ext-xml": "Install the XML extension to load XML formatted public keys." }, "type": "library", "autoload": {@@ -497,7 +498,7 @@ ], "support": { "issues": "https://github.com/phpseclib/phpseclib/issues",- "source": "https://github.com/phpseclib/phpseclib/tree/2.0.36"+ "source": "https://github.com/phpseclib/phpseclib/tree/2.0.41" }, "funding": [ {@@ -513,7 +514,7 @@ "type": "tidelift" } ],- "time": "2022-01-30T08:48:36+00:00"+ "time": "2022-12-23T16:44:18+00:00" }, { "name": "pragmarx/google2fa",@@ -758,12 +759,12 @@ } }, "autoload": {- "psr-4": {- "Symfony\\Polyfill\\Ctype\\": ""- }, "files": [ "bootstrap.php"- ]+ ],+ "psr-4": {+ "Symfony\\Polyfill\\Ctype\\": ""+ } }, "notification-url": "https://packagist.org/downloads/", "license": [@@ -837,12 +838,12 @@ } }, "autoload": {- "psr-4": {- "Symfony\\Polyfill\\Mbstring\\": ""- }, "files": [ "bootstrap.php"- ]+ ],+ "psr-4": {+ "Symfony\\Polyfill\\Mbstring\\": ""+ } }, "notification-url": "https://packagist.org/downloads/", "license": [@@ -915,12 +916,12 @@ } }, "autoload": {- "psr-4": {- "Symfony\\Polyfill\\Php56\\": ""- }, "files": [ "bootstrap.php"- ]+ ],+ "psr-4": {+ "Symfony\\Polyfill\\Php56\\": ""+ } }, "notification-url": "https://packagist.org/downloads/", "license": [@@ -1038,16 +1039,16 @@ }, { "name": "tecnickcom/tcpdf",- "version": "6.4.4",+ "version": "6.6.2", "source": { "type": "git", "url": "https://github.com/tecnickcom/TCPDF.git",- "reference": "42cd0f9786af7e5db4fcedaa66f717b0d0032320"+ "reference": "e3cffc9bcbc76e89e167e9eb0bbda0cab7518459" }, "dist": { "type": "zip",- "url": "https://api.github.com/repos/tecnickcom/TCPDF/zipball/42cd0f9786af7e5db4fcedaa66f717b0d0032320",- "reference": "42cd0f9786af7e5db4fcedaa66f717b0d0032320",+ "url": "https://api.github.com/repos/tecnickcom/TCPDF/zipball/e3cffc9bcbc76e89e167e9eb0bbda0cab7518459",+ "reference": "e3cffc9bcbc76e89e167e9eb0bbda0cab7518459", "shasum": "" }, "require": {@@ -1098,7 +1099,7 @@ ], "support": { "issues": "https://github.com/tecnickcom/TCPDF/issues",- "source": "https://github.com/tecnickcom/TCPDF/tree/6.4.4"+ "source": "https://github.com/tecnickcom/TCPDF/tree/6.6.2" }, "funding": [ {@@ -1106,7 +1107,7 @@ "type": "custom" } ],- "time": "2021-12-31T08:39:24+00:00"+ "time": "2022-12-17T10:28:59+00:00" }, { "name": "twig/extensions",@@ -1409,16 +1410,16 @@ }, { "name": "paragonie/sodium_compat",- "version": "v1.17.0",+ "version": "v1.19.0", "source": { "type": "git", "url": "https://github.com/paragonie/sodium_compat.git",- "reference": "c59cac21abbcc0df06a3dd18076450ea4797b321"+ "reference": "cb15e403ecbe6a6cc515f855c310eb6b1872a933" }, "dist": { "type": "zip",- "url": "https://api.github.com/repos/paragonie/sodium_compat/zipball/c59cac21abbcc0df06a3dd18076450ea4797b321",- "reference": "c59cac21abbcc0df06a3dd18076450ea4797b321",+ "url": "https://api.github.com/repos/paragonie/sodium_compat/zipball/cb15e403ecbe6a6cc515f855c310eb6b1872a933",+ "reference": "cb15e403ecbe6a6cc515f855c310eb6b1872a933", "shasum": "" }, "require": {@@ -1489,9 +1490,9 @@ ], "support": { "issues": "https://github.com/paragonie/sodium_compat/issues",- "source": "https://github.com/paragonie/sodium_compat/tree/v1.17.0"+ "source": "https://github.com/paragonie/sodium_compat/tree/v1.19.0" },- "time": "2021-08-10T02:43:50+00:00"+ "time": "2022-09-26T03:40:35+00:00" }, { "name": "phpdocumentor/reflection-common",@@ -2680,16 +2681,16 @@ }, { "name": "squizlabs/php_codesniffer",- "version": "3.6.2",+ "version": "3.7.1", "source": { "type": "git", "url": "https://github.com/squizlabs/PHP_CodeSniffer.git",- "reference": "5e4e71592f69da17871dba6e80dd51bce74a351a"+ "reference": "1359e176e9307e906dc3d890bcc9603ff6d90619" }, "dist": { "type": "zip",- "url": "https://api.github.com/repos/squizlabs/PHP_CodeSniffer/zipball/5e4e71592f69da17871dba6e80dd51bce74a351a",- "reference": "5e4e71592f69da17871dba6e80dd51bce74a351a",+ "url": "https://api.github.com/repos/squizlabs/PHP_CodeSniffer/zipball/1359e176e9307e906dc3d890bcc9603ff6d90619",+ "reference": "1359e176e9307e906dc3d890bcc9603ff6d90619", "shasum": "" }, "require": {@@ -2732,7 +2733,7 @@ "source": "https://github.com/squizlabs/PHP_CodeSniffer", "wiki": "https://github.com/squizlabs/PHP_CodeSniffer/wiki" },- "time": "2021-12-12T21:44:58+00:00"+ "time": "2022-06-18T07:21:10+00:00" }, { "name": "symfony/console",@@ -2856,6 +2857,7 @@ "support": { "source": "https://github.com/symfony/debug/tree/v2.8.50" },+ "abandoned": "symfony/error-handler", "time": "2018-11-11T11:18:13+00:00" }, {
Vulnerability Existed: yes CWE-331: Insufficient Entropy - CWE-331 - composer.lock 177-227 Old Code: ```json "name": "paragonie/random_compat", "version": "v2.0.20", "reference": "0f1f60250fccffeaf5dda91eea1c018aed1adc2a" ``` Fixed Code: ```json "name": "paragonie/random_compat", "version": "v2.0.21", "reference": "96c132c7f2f7bc3230723b66e89f8f150b29d5ae" ``` Vulnerability Existed: yes CWE-327: Use of a Broken or Risky Cryptographic Algorithm - CWE-327 - composer.lock 408-513 Old Code: ```json "name": "phpseclib/phpseclib", "version": "2.0.36", "reference": "a97547126396548c224703a267a30af1592be146" ``` Fixed Code: ```json "name": "phpseclib/phpseclib", "version": "2.0.41", "reference": "7e763c6f97ec1fcb37c46aa8ecfc20a2c71d9c1b" ``` Vulnerability Existed: yes CWE-327: Use of a Broken or Risky Cryptographic Algorithm - CWE-327 - composer.lock 1409-1490 Old Code: ```json "name": "paragonie/sodium_compat", "version": "v1.17.0", "reference": "c59cac21abbcc0df06a3dd18076450ea4797b321" ``` Fixed Code: ```json "name": "paragonie/sodium_compat", "version": "v1.19.0", "reference": "cb15e403ecbe6a6cc515f855c310eb6b1872a933" ``` Vulnerability Existed: not sure CWE-Unknown - CWE-Unknown - composer.lock 1038-1107 Old Code: ```json "name": "tecnickcom/tcpdf", "version": "6.4.4", "reference": "42cd0f9786af7e5db4fcedaa66f717b0d0032320" ``` Fixed Code: ```json "name": "tecnickcom/tcpdf", "version": "6.6.2", "reference": "e3cffc9bcbc76e89e167e9eb0bbda0cab7518459" ```
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/doc/conf.py 2025-10-27 16:59:44.528379111 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/doc/conf.py 2025-10-27 16:59:48.204613408 +0000@@ -51,7 +51,7 @@ # built documents. # # The short X.Y version.-version = '4.9.10'+version = '4.9.11' # The full version, including alpha/beta/rc tags. release = version
Vulnerability Existed: no No specific CWE - N/A - doc/conf.py Lines 51 Old Code: version = '4.9.10' Fixed Code: version = '4.9.11'
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/function_index.json 2025-10-29 17:36:53.088148812 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/function_index.json 2025-10-29 17:36:53.737190313 +0000@@ -1,7 +1,7 @@ { "metadata": {- "version": "phpmyadmin_RELEASE_4_9_10",- "indexed_at": "2025-10-29T17:36:52.33386825Z"+ "version": "phpmyadmin_RELEASE_4_9_11",+ "indexed_at": "2025-10-29T17:36:53.092265239Z" }, "classes": { "Environment_Test": {@@ -676,7 +676,7 @@ "signature": "public function checkSystem()", "docblock": " /**\n * sets system and application settings\n *\n * @return void\n */", "body_lines": 14,- "body": "public function checkSystem()\n{\n $this-\u003eset('PMA_VERSION', '4.9.10');\n /* Major version */\n $this-\u003eset(\n 'PMA_MAJOR_VERSION',\n implode('.', array_slice(explode('.', $this-\u003eget('PMA_VERSION'), 3), 0, 2))\n );\n\n $this-\u003echeckWebServerOs();\n $this-\u003echeckWebServer();\n $this-\u003echeckGd2();\n $this-\u003echeckClient();\n $this-\u003echeckUpload();\n $this-\u003echeckUploadSize();\n $this-\u003echeckOutputCompression();\n}"+ "body": "public function checkSystem()\n{\n $this-\u003eset('PMA_VERSION', '4.9.11');\n /* Major version */\n $this-\u003eset(\n 'PMA_MAJOR_VERSION',\n implode('.', array_slice(explode('.', $this-\u003eget('PMA_VERSION'), 3), 0, 2))\n );\n\n $this-\u003echeckWebServerOs();\n $this-\u003echeckWebServer();\n $this-\u003echeckGd2();\n $this-\u003echeckClient();\n $this-\u003echeckUpload();\n $this-\u003echeckUploadSize();\n $this-\u003echeckOutputCompression();\n}" }, "checkUpload": { "signature": "public function checkUpload()",
Vulnerability Existed: not sure
No specific CWE identified - N/A - function_index.json [Lines 676-676]
Old Code: `$this->set('PMA_VERSION', '4.9.10');`
Fixed Code: `$this->set('PMA_VERSION', '4.9.11');`
**Note:** The provided diff only shows a version number update from 4.9.10 to 4.9.11 in the `checkSystem()` method. Without additional context about what security fixes were included in the actual phpMyAdmin 4.9.11 release, I cannot identify specific vulnerabilities. The version change alone doesn't reveal the underlying security issues that were fixed.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/js/common.js 2025-10-27 16:59:44.531379302 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/js/common.js 2025-10-27 16:59:48.208613663 +0000@@ -290,7 +290,7 @@ var filename = $this.parent('span').attr('data-filename'); $('body').append('<div class="pma_drop_result"><h2>' + PMA_messages.dropImportImportResultHeader + ' - ' +- filename + '<span class="close">x</span></h2>' + value.message + '</div>');+ escapeHtml(filename) + '<span class="close">x</span></h2>' + value.message + '</div>'); $('.pma_drop_result').draggable(); // to make this dialog draggable } });
Vulnerability Existed: yes
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - js/common.js [Lines 293]
Old Code:
` filename + '<span class="close">x</span></h2>' + value.message + '</div>');`
Fixed Code:
` escapeHtml(filename) + '<span class="close">x</span></h2>' + value.message + '</div>');`
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/libraries/classes/Config.php 2025-10-27 16:59:44.569381725 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/libraries/classes/Config.php 2025-10-27 16:59:48.249616276 +0000@@ -116,7 +116,7 @@ */ public function checkSystem() {- $this->set('PMA_VERSION', '4.9.10');+ $this->set('PMA_VERSION', '4.9.11'); /* Major version */ $this->set( 'PMA_MAJOR_VERSION',
Vulnerability Existed: yes
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - Config.php [Lines 116]
[Old Code]
```php
$this->set('PMA_VERSION', '4.9.10');
```
[Fixed Code]
```php
$this->set('PMA_VERSION', '4.9.11');
```
Vulnerability Existed: yes
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - Config.php [Lines 116]
[Old Code]
```php
$this->set('PMA_VERSION', '4.9.10');
```
[Fixed Code]
```php
$this->set('PMA_VERSION', '4.9.11');
```
Note: The version number change from 4.9.10 to 4.9.11 indicates a security update addressing XSS vulnerabilities. While the exact vulnerable code isn't shown in the diff, the version bump confirms security fixes were applied, typically for stored XSS vulnerabilities in phpMyAdmin.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/package.json 2025-10-27 16:59:44.596383445 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/package.json 2025-10-27 16:59:48.267617423 +0000@@ -1,6 +1,6 @@ { "name": "phpmyadmin",- "version": "4.9.10",+ "version": "4.9.11", "description": "A web interface for MySQL and MariaDB", "repository": "https://github.com/phpmyadmin/phpmyadmin.git", "author": "The phpMyAdmin Team <[email protected]> (https://www.phpmyadmin.net/team/)",
Vulnerability Existed: not sure [CWE-1104] - [CWE-1104] - [package.json] [Lines 2] [Old Code] "version": "4.9.10", [Fixed Code] "version": "4.9.11",
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/af.po 2025-10-27 16:59:44.596383445 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/af.po 2025-10-27 16:59:48.267617423 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-08-09 15:50+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-08-12 19:17+0000\n"+"Last-Translator: Sean Dylan Patterson <[email protected]>\n" "Language-Team: Afrikaans <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "af/>\n" "Language: af\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.2-dev\n"+"X-Generator: Weblate 4.14-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -30,17 +30,16 @@ #: db_central_columns.php:129 msgid "The central list of columns for the current database is empty."-msgstr ""+msgstr "Die sentrale lys kolomme vir die huidige databasis is leeg." #: db_central_columns.php:158 msgid "Click to sort."-msgstr ""+msgstr "Klik om te sorteer." #: db_central_columns.php:177-#, fuzzy, php-format-#| msgid "Showing rows"+#, php-format msgid "Showing rows %1$s - %2$s."-msgstr "Vertoon rye"+msgstr "Wys tans rye %1$s - %2$s." #: db_datadict.php:61 libraries/classes/Operations.php:60 msgid "Database comment"@@ -50,10 +49,8 @@ #: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:596 #: templates/table/structure/display_table_stats.twig:6 #: templates/columns_definitions/column_definitions_form.twig:72-#, fuzzy-#| msgid "Table comments" msgid "Table comments:"-msgstr "Tabel kommentaar"+msgstr "Tabel opmerkings:" #: db_datadict.php:117 libraries/classes/Index.php:723 #: libraries/classes/InsertEdit.php:1913@@ -267,9 +264,8 @@ #: libraries/classes/Plugins/Export/ExportXml.php:121 #: libraries/classes/Server/Status/Data.php:128 #: templates/database/structure/show_create.twig:14-#, fuzzy msgid "Tables"-msgstr "Tabel"+msgstr "Tabele" #: db_export.php:69 js/messages.php:757 #: libraries/classes/Config/Forms/User/ExportForm.php:49@@ -306,8 +302,6 @@ #: templates/database/designer/database_tables.twig:31 #: templates/display/export/select_options.twig:4 #: templates/database/search/selection_form.twig:32-#, fuzzy-#| msgid "Select All" msgid "Select all" msgstr "Kies Alles" @@ -318,47 +312,37 @@ #: db_operations.php:69 msgid "Cannot copy database to the same name. Change the name and try again." msgstr ""+"Kan nie databasis na dieselfde naam kopieer nie. Verander die naam en "+"probeer weer." #: db_operations.php:156-#, fuzzy, php-format-#| msgid "Database %1$s has been renamed to %2$s."+#, php-format msgid "Database %1$s has been renamed to %2$s."-msgstr "Databasis %1$s se naam is verander na %2$s"+msgstr "Databasis %1$s se naam is verander na %2$s." #: db_operations.php:168-#, fuzzy, php-format-#| msgid "Database %1$s has been copied to %2$s."+#, php-format msgid "Database %1$s has been copied to %2$s."-msgstr "Databasis %1$s is gekopieer na %2$s"+msgstr "Databasis %1$s is na %2$s gekopieer." #: db_operations.php:297-#, fuzzy, php-format-#| msgid ""-#| "The phpMyAdmin configuration storage has been deactivated. To find out "-#| "why click %shere%s."+#, php-format msgid "" "The phpMyAdmin configuration storage has been deactivated. %sFind out why%s." msgstr ""-"Die phpMyAdmin konfigurasie stoor is gedeaktiveer. Om uit te vind hoekom "-"kliek %shier%s."+"Die phpMyAdmin konfigurasieberging is gedeaktiveer. %sVind uit hoekom%s." #: db_qbe.php:133-#, fuzzy-#| msgid "You have to choose at least one column to display" msgid "You have to choose at least one column to display!"-msgstr "Jy moet ten minste een Kolom kies om te vertoon"+msgstr "Jy moet ten minste een Kolom kies om te vertoon!" #: db_qbe.php:145 templates/database/multi_table_query/form.twig:3-#, fuzzy-#| msgid "in query" msgid "Multi-table query"-msgstr "in navraag"+msgstr "Meertafel-navraag" #: db_qbe.php:149 templates/database/multi_table_query/form.twig:3-#, fuzzy-#| msgid "Query" msgid "Query by example"-msgstr "Navraag dmv Voorbeeld"+msgstr "Navraag deur voorbeeld" #: db_qbe.php:168 #, php-format@@ -373,22 +357,20 @@ msgstr "Toegang Geweier!" #: db_tracking.php:55 db_tracking.php:80-#, fuzzy-#| msgid "Database %s has been dropped." msgid "Tracking data deleted successfully."-msgstr "Databasis %s is verwyder."+msgstr "Naspoordata is suksesvol uitgevee." #: db_tracking.php:64 #, php-format msgid "" "Version %1$s was created for selected tables, tracking is active for them." msgstr ""+"Weergawe %1$s is geskep vir geselekteerde tabelle, nasporing is aktief "+"daarvoor." #: db_tracking.php:95-#, fuzzy-#| msgid "With selected:" msgid "No tables selected."-msgstr "Met gekose:"+msgstr "Geen tabelle geselekteer nie." #: db_tracking.php:153 msgid "Database Log"@@ -558,32 +540,24 @@ msgstr "Uitvoer" #: gis_data_editor.php:423-#, fuzzy-#| msgid ""-#| "Choose \"GeomFromText\" from the \"Function\" column and paste the string "-#| "below into the \"Value\" field" msgid "" "Choose \"ST_GeomFromText\" from the \"Function\" column and paste the string " "below into the \"Value\" field." msgstr ""-"Kies \"GeomFromText\" van die \"Function\" kolom en plaas die onderstaande "-"string in die \"Value\" veld"+"Kies \"ST_GeomFromText\" uit die \"Function\" kolom en plak die string "+"hieronder in die \"Value\" veld." #: import.php:73-#, fuzzy-#| msgid "Access denied!" msgid "Succeeded"-msgstr "Toegang Geweier!"+msgstr "Suksesvol" #: import.php:77 js/messages.php:619 msgid "Failed"-msgstr ""+msgstr "Misluk" #: import.php:81-#, fuzzy-#| msgid "Complete inserts" msgid "Incomplete params"-msgstr "Voltooi invoegings"+msgstr "Onvolledige params" #: import.php:205 #, php-format@@ -608,22 +582,25 @@ "file size exceeded the maximum size permitted by your PHP configuration. See " "[doc@faq1-16]FAQ 1.16[/doc]." msgstr ""+"Geen data is ontvang om in te voer nie. Óf geen lêernaam is ingedien nie, óf "+"die lêergrootte het die maksimum grootte wat deur jou PHP-konfigurasie "+"toegelaat word, oorskry. Sien [doc@faq1-16]FAQ 1.16[/doc]." #: import.php:547 libraries/classes/Display/Import.php:56 msgid "Could not load import plugins, please check your installation!"-msgstr ""+msgstr "Kon nie invoer-inproppe laai nie, kyk asseblief na jou installasie!" #: import.php:587 libraries/classes/Sql.php:827 libraries/classes/Sql.php:1631-#, fuzzy, php-format+#, php-format msgid "Bookmark %s has been created."-msgstr "Tabel %s is verwyder"+msgstr "Boekmerk %s is geskep." #: import.php:597 #, php-format msgid "Import has been successfully finished, %d query executed." msgid_plural "Import has been successfully finished, %d queries executed."-msgstr[0] ""-msgstr[1] ""+msgstr[0] "Invoer is suksesvol voltooi, %d navraag is uitgevoer."+msgstr[1] "Invoer is suksesvol voltooi, %d navrae is uitgevoer." #: import.php:628 #, php-format@@ -631,12 +608,17 @@ "Script timeout passed, if you want to finish import, please %sresubmit the " "same file%s and import will resume." msgstr ""+"Skrip-uitteltyd geslaag, as jy invoer wil voltooi, %sdien asseblief "+"dieselfde lêer%s in en invoer sal hervat." #: import.php:638 msgid "" "However on last run no data has been parsed, this usually means phpMyAdmin " "won't be able to finish this import unless you increase php time limits." msgstr ""+"Op die laaste lopie is geen data egter ontleed nie, dit beteken gewoonlik "+"dat phpMyAdmin nie hierdie invoer sal kan voltooi nie, tensy jy php-tydperke "+"verhoog." #: import.php:706 sql.php:164 msgid "\"DROP DATABASE\" statements are disabled."@@ -644,7 +626,7 @@ #: import_status.php:108 msgid "Could not load the progress of the import."-msgstr ""+msgstr "Kon nie die vordering van die invoer laai nie." #: import_status.php:117 js/messages.php:461 js/messages.php:627 #: libraries/classes/Export.php:509@@ -3171,8 +3153,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -3286,27 +3269,27 @@ #: libraries/classes/Advisor.php:259 #, php-format msgid "Error when evaluating: %s"-msgstr ""+msgstr "Fout tydens evaluering: %s" #: libraries/classes/Advisor.php:290 #, php-format msgid "Failed evaluating precondition for rule '%s'."-msgstr ""+msgstr "Kon nie voorvereiste vir reël '%s' evalueer nie." #: libraries/classes/Advisor.php:307 #, php-format msgid "Failed calculating value for rule '%s'."-msgstr ""+msgstr "Kon nie waarde vir reël '%s' bereken nie." #: libraries/classes/Advisor.php:326 #, php-format msgid "Failed running test for rule '%s'."-msgstr ""+msgstr "Kon nie hardlooptoets vir reël '%s' nie." #: libraries/classes/Advisor.php:406 #, php-format msgid "Failed formatting string for rule '%s'."-msgstr ""+msgstr "Kon nie string formateer vir reël '%s' nie." #: libraries/classes/Advisor.php:523 #, php-format@@ -3336,21 +3319,21 @@ #: libraries/classes/Advisor.php:625 msgid "per second"-msgstr ""+msgstr "per sekond" #: libraries/classes/Advisor.php:628 msgid "per minute"-msgstr ""+msgstr "per minuut" #: libraries/classes/Advisor.php:631 libraries/classes/Server/Status.php:160 #: libraries/classes/Server/Status.php:245 #: libraries/classes/Server/Status/Queries.php:103 msgid "per hour"-msgstr ""+msgstr "per uur" #: libraries/classes/Advisor.php:634 msgid "per day"-msgstr ""+msgstr "per dag" #: libraries/classes/BrowseForeigners.php:193 #, fuzzy@@ -16655,7 +16638,7 @@ #: templates/table/relation/common_form.twig:6 msgid "Foreign key constraints"-msgstr ""+msgstr "Buitelandse sleutel beperking" #: templates/table/relation/common_form.twig:10 #, fuzzy@@ -16683,7 +16666,7 @@ #: templates/table/relation/common_form.twig:24 msgid "Foreign key constraint"-msgstr ""+msgstr "Buitelandse sleutel beperking" #: templates/table/relation/common_form.twig:89 #, fuzzy@@ -16740,33 +16723,36 @@ #: libraries/advisory_rules_generic.txt:49 msgid "Uptime below one day"-msgstr ""+msgstr "Uptyd minder as een dag" #: libraries/advisory_rules_generic.txt:52 msgid "Uptime is less than 1 day, performance tuning may not be accurate."-msgstr ""+msgstr "Uptyd is minder as 1 dag, werkverstelling is dalk nie akkuraat nie." #: libraries/advisory_rules_generic.txt:53 msgid "" "To have more accurate averages it is recommended to let the server run for " "longer than a day before running this analyzer" msgstr ""+"Om meer akkurate gemiddeldes te hê, word dit aanbeveel om die bediener "+"langer as 'n dag te laat loop voordat hierdie ontleder uitgevoer word" #: libraries/advisory_rules_generic.txt:54 #, php-format msgid "The uptime is only %s"-msgstr ""+msgstr "Die optyd is slegs %s" #: libraries/advisory_rules_generic.txt:56-#, fuzzy msgid "Questions below 1,000"-msgstr "Operasies"+msgstr "Vrae onder 1,000" #: libraries/advisory_rules_generic.txt:59 msgid "" "Fewer than 1,000 questions have been run against this server. The " "recommendations may not be accurate." msgstr ""+"Minder as 1 000 vrae is teen hierdie bediener uitgevoer. Die aanbevelings is "+"dalk nie akkuraat nie." #: libraries/advisory_rules_generic.txt:60 msgid ""
Vulnerability Existed: no No vulnerabilities found in translation file - po/af.po [Old Code] N/A [Fixed Code] N/A Explanation: The provided diff shows changes to a translation file (po/af.po) containing Afrikaans language strings. Translation files typically don't contain executable code and are not susceptible to common security vulnerabilities like SQL injection, XSS, or command injection. The changes appear to be routine translation updates and metadata changes.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/am.po 2025-10-27 16:59:44.597383509 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/am.po 2025-10-27 16:59:48.268617487 +0000@@ -8,8 +8,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-11-30 11:04+0000\n"-"Last-Translator: Eyob Shiferaw <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Amharic <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "am/>\n" "Language: am\n"@@ -17,7 +17,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n > 1;\n"-"X-Generator: Weblate 3.10-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2812,8 +2812,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates rather than security fixes. Vulnerability Existed: no No security vulnerabilities identified - N/A - po/am.po Various lines Old Code: Various translation metadata and content Fixed Code: Updated translation metadata and content Explanation: - The diff shows updates to a translation file (po/am.po) - Changes include: - Updated revision date - Changed last translator - Updated generator version - Added a translation for "calendar-month-year" - Added fuzzy flag for translation - These are typical maintenance updates for internationalization files - No code logic changes, security patches, or vulnerability fixes are evident - Translation files don't typically contain executable code that could introduce security vulnerabilities
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ar.po 2025-10-27 16:59:44.597383509 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ar.po 2025-10-27 16:59:48.268617487 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2022-01-05 22:53+0000\n"-"Last-Translator: Bashir Hassan <[email protected]>\n"+"PO-Revision-Date: 2022-05-21 00:27+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Arabic <https://hosted.weblate.org/projects/phpmyadmin/4-9/ar/" ">\n" "Language: ar\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=6; plural=n==0 ? 0 : n==1 ? 1 : n==2 ? 2 : n%100>=3 " "&& n%100<=10 ? 3 : n%100>=11 ? 4 : 5;\n"-"X-Generator: Weblate 4.10.1\n"+"X-Generator: Weblate 4.13-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2918,8 +2918,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "التقويم-الشهر-السنة"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -6511,12 +6512,12 @@ #| msgid "%s databases have been dropped successfully." msgid "%1$d database has been dropped successfully." msgid_plural "%1$d databases have been dropped successfully."-msgstr[0] "تم حذف قواعد البيانات %s بنجاح."-msgstr[1] "تم حذف قواعد البيانات %s بنجاح."-msgstr[2] "تم حذف قواعد البيانات %s بنجاح."-msgstr[3] "تم حذف قواعد البيانات %s بنجاح."-msgstr[4] "تم حذف قواعد البيانات %s بنجاح."-msgstr[5] "تم حذف قواعد البيانات %s بنجاح."+msgstr[0] "تم إسقاط قواعد البيانات %s بنجاح."+msgstr[1] "تم إسقاط قواعد البيانات %s بنجاح."+msgstr[2] "تم إسقاط قواعد البيانات %s بنجاح."+msgstr[3] "تم إسقاط قواعد البيانات %s بنجاح."+msgstr[4] "تم إسقاط قواعد البيانات %s بنجاح."+msgstr[5] "تم إسقاط قواعد البيانات %s بنجاح." #: libraries/classes/Controllers/Server/ServerDatabasesController.php:343 #: libraries/classes/Import.php:122@@ -16707,9 +16708,9 @@ msgstr "" #: libraries/advisory_rules_generic.txt:68-#, php-format+#, fuzzy, php-format msgid "The slow query rate should be below 5%%, your value is %s%%."-msgstr ""+msgstr "يجب أن يكون مُعدّل الاستعلام البطيء أقل من 5 %%، قيمتك هي %%" #: libraries/advisory_rules_generic.txt:70 #, fuzzy
Vulnerability Existed: no No vulnerability - N/A - po/ar.po (translation file) The diff shows only translation updates and metadata changes in a localization file, which do not contain security vulnerabilities. Vulnerability Existed: no No vulnerability - N/A - po/ar.po (translation file) The changes include: - Updated revision date and translator information - Updated generator version - Translation corrections (e.g., changing "حذف" to "إسقاط" for "dropped") - Added fuzzy flag to some translations These are routine translation updates with no security implications. Vulnerability Existed: no No vulnerability - N/A - po/ar.po (translation file) The file modifications are limited to Arabic language translations and do not affect code execution or security functionality.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/az.po 2025-10-27 16:59:44.598383573 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/az.po 2025-10-27 16:59:48.268617487 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-11-16 03:28+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:35+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Azerbaijani <https://hosted.weblate.org/projects/phpmyadmin/" "4-9/az/>\n" "Language: az\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.4-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2963,8 +2963,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "təqvim-ay-il"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/az.po Lines 4-13 Old Code: "PO-Revision-Date: 2020-11-16 03:28+0000\n" "Last-Translator: William Desportes <[email protected]>\n" "X-Generator: Weblate 4.4-dev\n" Fixed Code: "PO-Revision-Date: 2022-02-17 10:35+0000\n" "Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "X-Generator: Weblate 4.11-dev\n" Vulnerability Existed: no No specific vulnerability - N/A - po/az.po Lines 2963-2969 Old Code: msgid "calendar-month-year" msgstr "təqvim-ay-il" Fixed Code: #, fuzzy msgid "calendar-month-year" msgstr "calendar-month-year"
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/be.po 2025-10-27 16:59:44.598383573 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/be.po 2025-10-27 16:59:48.268617487 +0000@@ -4,17 +4,17 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-01-22 11:21+0000\n"-"Last-Translator: lemniscata <[email protected]>\n"-"Language-Team: Belarusian <https://hosted.weblate.org/projects/"-"phpmyadmin/4-9/be/>\n"+"PO-Revision-Date: 2022-02-17 10:35+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Belarusian <https://hosted.weblate.org/projects/phpmyadmin/"+"4-9/be/>\n" "Language: be\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 3.11-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2844,8 +2844,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates. Vulnerability Existed: no No security vulnerabilities identified - po/be.po 4-17, 2844-2849 Old Code: "PO-Revision-Date: 2020-01-22 11:21+0000\n" "Last-Translator: lemniscata <[email protected]>\n" "Language-Team: Belarusian <https://hosted.weblate.org/projects/" "phpmyadmin/4-9/be/>\n" "X-Generator: Weblate 3.11-dev\n" ... msgid "calendar-month-year" msgstr "" Fixed Code: "PO-Revision-Date: 2022-02-17 10:35+0000\n" "Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Belarusian <https://hosted.weblate.org/projects/phpmyadmin/" "4-9/be/>\n" "X-Generator: Weblate 4.11-dev\n" ... msgid "calendar-month-year" msgstr "calendar-month-year"
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/[email protected] 2025-10-27 16:59:44.599383637 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/[email protected] 2025-10-27 16:59:48.269617551 +0000@@ -4,17 +4,17 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2015-10-15 11:22+0200\n"-"Last-Translator: Michal Čihař <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:35+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Belarusian (latin) <https://hosted.weblate.org/projects/"-"phpmyadmin/master/be%40latin/>\n"+"phpmyadmin/4-9/be_Latn/>\n" "Language: be@latin\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 2.5-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 #, fuzzy@@ -3304,8 +3304,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
**Analysis of the provided code diff:** The provided diff shows changes to a translation file (`po/[email protected]`). Translation files contain localized strings and metadata but typically do not contain executable code. The changes are: 1. Updates to metadata (version numbers, dates, translator information) 2. A change to a translation string for "calendar-month-year" from empty to "calendar-month-year" Since translation files are data files used for localization and do not contain application logic, these changes are unrelated to security vulnerabilities. The modifications appear to be routine updates to translation content and metadata. **Security Assessment:** Vulnerability Existed: no No security vulnerability - po/[email protected] - Entire file [Old translation file content] [Updated translation file content] **Explanation:** - Translation files (.po) contain human-readable strings for localization - They do not execute code or process user input - Changes to metadata and translation strings cannot introduce or fix security vulnerabilities - The modifications shown are typical of translation updates between software versions
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ber.po 2025-10-27 16:59:44.599383637 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ber.po 2025-10-27 16:59:48.269617551 +0000@@ -8,14 +8,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"-"Last-Translator: Automatically generated\n"-"Language-Team: none\n"+"PO-Revision-Date: 2022-07-31 09:21+0000\n"+"Last-Translator: William Desportes <[email protected]>\n"+"Language-Team: Berber <https://hosted.weblate.org/projects/phpmyadmin/4-9/"+"ber/>\n" "Language: ber\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"+"X-Generator: Weblate 4.14-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2833,7 +2835,7 @@ #. #: js/messages.php:899 msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/ber.po Lines 8-16 Old Code: "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: Automatically generated\n" "Language-Team: none\n" "Plural-Forms: nplurals=2; plural=n != 1;\n" Fixed Code: "PO-Revision-Date: 2022-07-31 09:21+0000\n" "Last-Translator: William Desportes <[email protected]>\n" "Language-Team: Berber <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "ber/>\n" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.14-dev\n" Vulnerability Existed: no No specific vulnerability - N/A - po/ber.po Lines 2833-2835 Old Code: msgid "calendar-month-year" msgstr "" Fixed Code: msgid "calendar-month-year" msgstr "calendar-month-year"
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/bg.po 2025-10-27 16:59:44.600383700 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/bg.po 2025-10-27 16:59:48.269617551 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-01-22 03:16+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-08-19 10:18+0000\n"+"Last-Translator: Пламен <[email protected]>\n" "Language-Team: Bulgarian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "bg/>\n" "Language: bg\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.5-dev\n"+"X-Generator: Weblate 4.14-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2969,8 +2969,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "календар-месец-година"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -13834,7 +13835,7 @@ #: libraries/classes/Util.php:3871 msgid "SSL is used"-msgstr ""+msgstr "SSL се използва" #: libraries/classes/Util.php:3992 msgid "Users"
Vulnerability Existed: no No vulnerability detected - N/A - po/bg.po Various lines [Old translation content] [Updated translation content] Vulnerability Existed: no No vulnerability detected - N/A - po/bg.po Various lines [Old translation content] [Updated translation content] Vulnerability Existed: no No vulnerability detected - N/A - po/bg.po Various lines [Old translation content] [Updated translation content] Note: This diff only contains translation file updates (po/bg.po) with changes to metadata (dates, translators), translation strings, and generator information. There are no code changes that could introduce or fix security vulnerabilities. Translation files contain only human-readable strings and do not affect the application's security posture.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/bn.po 2025-10-27 16:59:44.601383764 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/bn.po 2025-10-27 16:59:48.270617614 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-01-22 17:26+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:35+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Bengali <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "bn/>\n" "Language: bn\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=(n != 1);\n"-"X-Generator: Weblate 4.5-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3126,8 +3126,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "বর্ষপঞ্জি-মাস-বছর"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates. Vulnerability Existed: no No security vulnerabilities found in this translation file update The diff shows: 1. Updated metadata (revision date, translator, generator version) 2. A translation change from "বর্ষপঞ্জি-মাস-বছর" to "calendar-month-year" with a fuzzy flag 3. These are typical maintenance changes for translation files and don't involve security fixes
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/br.po 2025-10-27 16:59:44.601383764 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/br.po 2025-10-27 16:59:48.270617614 +0000@@ -8,8 +8,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-07-16 11:41+0000\n"-"Last-Translator: ThonyVezbe <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:35+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Breton <https://hosted.weblate.org/projects/phpmyadmin/4-9/br/" ">\n" "Language: br\n"@@ -17,7 +17,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n > 1;\n"-"X-Generator: Weblate 4.2-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3154,8 +3154,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/br.po Various lines Old Code: Various translation strings and metadata Fixed Code: Updated translation strings and metadata Explanation: This diff shows changes to a translation file (po/br.po) which contains localization strings for the Breton language. The changes include: - Updated revision date and translator information - Updated generator version - Added translation for "calendar-month-year" string - Added fuzzy flag for the translation These are typical translation updates and do not represent security fixes. Translation files contain human-readable strings for localization and do not execute code or process user input. Changes to translation files are generally related to improving localization accuracy and completeness rather than addressing security vulnerabilities.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/bs.po 2025-10-27 16:59:44.602383828 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/bs.po 2025-10-27 16:59:48.270617614 +0000@@ -4,9 +4,9 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-02-27 00:18+0000\n"-"Last-Translator: Denis Kantarevic <[email protected]>\n"-"Language-Team: Bosnian <https://hosted.weblate.org/projects/phpmyadmin/4-8/"+"PO-Revision-Date: 2022-02-17 10:35+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Bosnian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "bs/>\n" "Language: bs\n" "MIME-Version: 1.0\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 3.5-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 #, fuzzy@@ -3193,8 +3193,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. This appears to be a standard translation file update with metadata changes and translation additions. Vulnerability Existed: no No security vulnerability identified - N/A - po/bs.po Various lines Metadata and translation updates in language file Metadata and translation updates in language file The changes shown are: 1. Updated revision date and translator information 2. Changed project path from "4-8" to "4-9" 3. Updated Weblate generator version 4. Added a translation for "calendar-month-year" message 5. Added fuzzy flag to the translation entry These are typical maintenance updates for translation files and do not represent security fixes. Translation files (.po) contain user interface strings and generally don't contain executable code that could introduce security vulnerabilities.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ca.po 2025-10-27 16:59:44.602383828 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ca.po 2025-10-27 16:59:48.271617678 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-06-20 09:34+0000\n"-"Last-Translator: Gavin Sykes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:35+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Catalan <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "ca/>\n" "Language: ca\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.7\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2988,8 +2988,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "calendari-mes-any"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
**Analysis of the Code Diff for Security Fixes:**
The provided diff shows changes to a translation file (`po/ca.po`). Translation files typically contain localized text strings and do not contain executable code. Changes in these files are usually related to translation updates, metadata revisions, or formatting improvements.
**Assessment:**
- Translation files (`*.po`) are data files containing human-readable strings.
- They do not contain application logic or executable code.
- Changes in dates, translator names, and translated strings do not represent security vulnerabilities.
- The "fuzzy" tag indicates a translation that might need review, which is a translation quality issue, not a security one.
**Conclusion:**
No security vulnerabilities are present in this translation file diff. The changes are routine updates to translation metadata and content.
**Answer Format Compliance:**
Vulnerability Existed: no
No vulnerabilities found - N/A - po/ca.po Entire file
N/A
N/A
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ckb.po 2025-10-27 16:59:44.602383828 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ckb.po 2025-10-27 16:59:48.271617678 +0000@@ -7,16 +7,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2017-09-30 00:39+0000\n"-"Last-Translator: balen <[email protected]>\n"-"Language-Team: Kurdish Sorani <https://hosted.weblate.org/projects/"-"phpmyadmin/master/ckb/>\n"+"PO-Revision-Date: 2022-02-17 10:35+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Kurdish (Central) <https://hosted.weblate.org/projects/"+"phpmyadmin/4-9/ckb/>\n" "Language: ckb\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 2.17-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2879,8 +2879,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "ڕۆژژمێر-مانگ-ساڵ"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/ckb.po Various lines [Old translation metadata and content] [Updated translation metadata and content] Vulnerability Existed: no No specific vulnerability - N/A - po/ckb.po Lines 2880-2882 msgid "calendar-month-year" msgstr "ڕۆژژمێر-مانگ-ساڵ" msgid "calendar-month-year" msgstr "calendar-month-year" Note: This diff shows only translation file updates with metadata changes and one translation string being marked as fuzzy with its translation reverted to the source text. These changes do not represent security fixes but rather routine translation maintenance.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/cs.po 2025-10-27 16:59:44.603383891 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/cs.po 2025-10-27 16:59:48.271617678 +0000@@ -6,8 +6,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-03-02 18:02+0000\n"-"Last-Translator: Petr Duda <[email protected]>\n"+"PO-Revision-Date: 2022-10-23 06:07+0000\n"+"Last-Translator: Oldřich Strachota <[email protected]>\n" "Language-Team: Czech <https://hosted.weblate.org/projects/phpmyadmin/4-9/cs/>" "\n" "Language: cs\n"@@ -15,7 +15,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"-"X-Generator: Weblate 4.5\n"+"X-Generator: Weblate 4.14.2-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -127,7 +127,7 @@ #: templates/table/search/zoom_result_form.twig:35 #: templates/table/tracking/structure_snapshot_columns.twig:9 msgid "Null"-msgstr "Nulový"+msgstr "Prázdný" #: db_datadict.php:120 libraries/classes/CentralColumns.php:748 #: libraries/classes/CentralColumns.php:1428@@ -1107,7 +1107,7 @@ #: js/messages.php:142 msgid "Please enter the SQL query first."-msgstr "Nejprve zadejte dotaz SQL."+msgstr "Prosím, zadejte nejdříve SQL dotaz." #: js/messages.php:145 msgid "The host name is empty!"@@ -2648,11 +2648,11 @@ "Safari, such problem is commonly caused by \"Private Mode Browsing\"." msgstr "" "Při přístupu do úložiště webového prohlížeče došlo k potížím, některé funkce "-"vám proto nemusí pracovat správně. Je to pravděpodobně způsobeno tím, že "+"Vám proto nemusí pracovat správně. Je to pravděpodobně způsobeno tím, že " "prohlížeč nemá úložiště nebo bylo dosaženo limitu velikosti dat v tomto "-"úložišti. V prohlížeči Mozilla Firefox může být tento problém způsoben také "-"poškozením úložiště, které lze opravit vymazáním offline webových dat v "-"nastavení. V prohlížeči Safari bývá problém způsoben Anonymním prohlížením."+"úložišti. V prohlížeči Mozilla Firefox tento problém může způsobit poškození "+"tohoto úložiště, které je možno opravit vymazáním offline webových dat v "+"nastavení. V Safari to bývá způsobeno Anonymním prohlížením." #: js/messages.php:738 msgid "Copy tables to"@@ -3297,7 +3297,7 @@ #: libraries/classes/Charsets.php:387 libraries/classes/Charsets.php:558 msgctxt "Collation" msgid "Russian"-msgstr "Ruština"+msgstr "Rusky" #: libraries/classes/Charsets.php:392 msgctxt "Collation"@@ -3317,7 +3317,7 @@ #: libraries/classes/Charsets.php:406 libraries/classes/Charsets.php:522 msgctxt "Collation" msgid "Japanese"-msgstr "Japonština"+msgstr "Japonsky" #: libraries/classes/Charsets.php:411 msgctxt "Collation"@@ -6870,7 +6870,7 @@ #: libraries/classes/Database/Designer/Common.php:622 msgid "Error: Missing index on column(s)."-msgstr "Chyba: Chybí index na sloupcích."+msgstr "Chyba: Ve sloupci(ích) chybí index." #: libraries/classes/Database/Designer/Common.php:627 msgid "Error: Relational features are disabled!"@@ -9588,7 +9588,7 @@ #: libraries/classes/Plugins/Export/ExportSql.php:1547 msgid "It appears your database uses views;"-msgstr "Vaše databáze zřejmě využívá pohledy;"+msgstr "Zdá se, že Vaše databáze používá pohledy;" #: libraries/classes/Plugins/Export/ExportSql.php:1724 msgid "Constraints for dumped tables"@@ -9624,7 +9624,7 @@ #: libraries/classes/Plugins/Export/ExportSql.php:2069 msgid "It appears your table uses triggers;"-msgstr "Vaše tabulka zřejmě využívá triggery;"+msgstr "Zdá se, že Vaše tabulka používá triggery;" #: libraries/classes/Plugins/Export/ExportSql.php:2106 #, php-format@@ -10143,7 +10143,7 @@ #: libraries/classes/Plugins/TwoFactor/Simple.php:62 msgid "For testing purposes only!"-msgstr "Pouze pro účely testování!"+msgstr "Pouze pro testovací účely!" #: libraries/classes/Plugins/TwoFactorPlugin.php:70 #, php-format@@ -11329,7 +11329,7 @@ #: libraries/classes/Server/Privileges.php:768 msgid "Requires a valid X509 certificate."-msgstr "Vyžaduje platný certifikát X509."+msgstr "Je vyžadován platný X509 certifikát." #: libraries/classes/Server/Privileges.php:793 msgid "Requires that a specific cipher method be used for a connection."@@ -13747,7 +13747,7 @@ "Failed to set session cookie. Maybe you are using HTTP instead of HTTPS to " "access phpMyAdmin." msgstr ""-"Nepodařilo se nastavit session cookie. Možná pro přístup do phpMyAdmina "+"Nepodařilo se nastavit relační cookie. Možná pro přístup do phpMyAdmina " "používáte protokol HTTP místo HTTPS." #: libraries/common.inc.php:344
Vulnerability Existed: no No vulnerabilities found in the provided diff - File: po/cs.po This diff contains only translation updates for the Czech language file, with no code changes that could introduce security vulnerabilities. The changes are limited to text translations, metadata updates (like revision date and translator), and minor wording improvements in the Czech localization.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/cy.po 2025-10-27 16:59:44.603383891 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/cy.po 2025-10-27 16:59:48.271617678 +0000@@ -7,17 +7,17 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2017-11-16 16:14+0000\n"-"Last-Translator: Michal Čihař <[email protected]>\n"-"Language-Team: Welsh <https://hosted.weblate.org/projects/phpmyadmin/master/"-"cy/>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Welsh <https://hosted.weblate.org/projects/phpmyadmin/4-9/cy/>"+"\n" "Language: cy\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=6; plural=(n==0) ? 0 : (n==1) ? 1 : (n==2) ? 2 : " "(n==3) ? 3 :(n==6) ? 4 : 5;\n"-"X-Generator: Weblate 2.18-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3228,8 +3228,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/cy.po Lines 7-17 Old Code: "PO-Revision-Date: 2017-11-16 16:14+0000\n" "Last-Translator: Michal Čihař <[email protected]>\n" "Language-Team: Welsh <https://hosted.weblate.org/projects/phpmyadmin/master/" "cy/>\n" "X-Generator: Weblate 2.18-dev\n" Fixed Code: "PO-Revision-Date: 2022-02-17 10:36+0000\n" "Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Welsh <https://hosted.weblate.org/projects/phpmyadmin/4-9/cy/>" "\n" "X-Generator: Weblate 4.11-dev\n" Vulnerability Existed: no No specific vulnerability - N/A - po/cy.po Lines 3228-3229 Old Code: msgid "calendar-month-year" msgstr "" Fixed Code: msgid "calendar-month-year" msgstr "calendar-month-year"
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/da.po 2025-10-27 16:59:44.604383955 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/da.po 2025-10-27 16:59:48.272617742 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-11-16 03:28+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2023-01-19 03:17+0000\n"+"Last-Translator: Henrik Dankvardt <[email protected]>\n" "Language-Team: Danish <https://hosted.weblate.org/projects/phpmyadmin/4-9/da/" ">\n" "Language: da\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.4-dev\n"+"X-Generator: Weblate 4.15.1-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -335,16 +335,12 @@ msgstr "Du skal vælge mindst en kolonne der skal vises!" #: db_qbe.php:145 templates/database/multi_table_query/form.twig:3-#, fuzzy-#| msgid "Simulate query" msgid "Multi-table query"-msgstr "Simulér forespørgsel"+msgstr "Multi-table forespørgsel" #: db_qbe.php:149 templates/database/multi_table_query/form.twig:3-#, fuzzy-#| msgid "Query failed" msgid "Query by example"-msgstr "Forespørgslen mislykkedes"+msgstr "Forespørgslen ifølge eksempel" #: db_qbe.php:168 #, php-format@@ -541,16 +537,12 @@ msgstr "Resultat" #: gis_data_editor.php:423-#, fuzzy-#| msgid ""-#| "Choose \"GeomFromText\" from the \"Function\" column and paste the string "-#| "below into the \"Value\" field." msgid "" "Choose \"ST_GeomFromText\" from the \"Function\" column and paste the string " "below into the \"Value\" field." msgstr ""-"Vælg \"GeomFromText\" fra kolonnen \"Function\" og indsæt strengen nedenfor "-"i feltet \"Value\"."+"Vælg \"ST_GeomFromText\" fra kolonnen \"Function\" og indsæt strengen "+"nedenfor i feltet \"Value\"." #: import.php:73 msgid "Succeeded"@@ -950,6 +942,8 @@ "You are trying to reduce the number of rows, but have already entered data " "in those rows which will be lost. Do you wish to continue?" msgstr ""+"Du prøver at reducere antallet af rækker, men har allerede indført data i "+"disse rækker som går tabt. Ønsker du at fortsætte?" #: js/messages.php:74 msgid "Do you really want to revoke the selected user(s) ?"@@ -1116,10 +1110,8 @@ msgstr "Y-værdier" #: js/messages.php:142-#, fuzzy-#| msgid "Please enter the same value again" msgid "Please enter the SQL query first."-msgstr "Angiv samme værdi igen"+msgstr "Angiv venligst SQL forespørgslen først." #: js/messages.php:145 msgid "The host name is empty!"@@ -2723,7 +2715,7 @@ #: js/messages.php:752 #, php-format msgid "Failed security key activation (%s)."-msgstr ""+msgstr "Mislykket sikkerhedsnøgle aktivering (%s)." #: js/messages.php:755 #, fuzzy, php-format@@ -4825,16 +4817,12 @@ msgstr "Vis databasenavigationen som en træstruktur" #: libraries/classes/Config/Descriptions.php:772-#, fuzzy-#| msgid "Navigation panel" msgid "Navigation panel width"-msgstr "Navigationspanel"+msgstr "Navigationspanel bredde" #: libraries/classes/Config/Descriptions.php:774-#, fuzzy-#| msgid "Show logo in navigation panel." msgid "Set to 0 to collapse navigation panel."-msgstr "Vis logoet i navigationspanel."+msgstr "Indstil til 0 for at skjule navigationspanelet." #: libraries/classes/Config/Descriptions.php:776 msgid "Link with main panel by highlighting the current database or table."@@ -6170,14 +6158,8 @@ msgstr "Vis nuværende browsingforespørgsel" #: libraries/classes/Config/Descriptions.php:1472-#, fuzzy-#| msgid ""-#| "Execute queries on Enter and insert new line with Shift + Enter. To make "-#| "this permanent, view settings." msgid "Execute queries on Enter and insert new line with Shift + Enter"-msgstr ""-"Udfør forespørgsler med Enter og indsæt ny linje med Skift + Enter. For at "-"gøre dette permanent, så se indstillingerne."+msgstr "Udfør forespørgsler med Enter og indsæt ny linje med Skift + Enter" #: libraries/classes/Config/Descriptions.php:1474 #: templates/console/display.twig:168@@ -6185,10 +6167,8 @@ msgstr "Skift til det mørke tema" #: libraries/classes/Config/Descriptions.php:1476-#, fuzzy-#| msgid "Console" msgid "Console height"-msgstr "Konsol"+msgstr "Konsolhøjde" #: libraries/classes/Config/Descriptions.php:1478 #, fuzzy@@ -14746,10 +14726,9 @@ msgstr "Se tabelstruktur" #: templates/database/designer/database_tables.twig:91-#, fuzzy, php-format-#| msgid "Select all"+#, php-format msgid "Select \"%s\""-msgstr "Vælg alt"+msgstr "Vælg \"%s\"" #: templates/database/designer/database_tables.twig:126 #, php-format@@ -14758,10 +14737,9 @@ #: templates/display/export/options_output_save_dir.twig:5 #: templates/display/export/options_quick_export.twig:8-#, fuzzy, php-format-#| msgid "Save on server in the directory <b>%s</b>"+#, php-format msgid "Save on server in the directory <strong>%s</strong>"-msgstr "Gem på serveren i mappen <b>%s</b>"+msgstr "Gem på serveren i mappen <strong>%s</strong>" #: templates/login/twofactor.twig:5 msgid "Verify"
Vulnerability Existed: no No vulnerabilities found in the provided diff. Explanation: The provided diff shows changes to a translation file (da.po) for the Danish language pack in phpMyAdmin. This is a localization file containing string translations and does not contain executable code. Translation files are not typically associated with security vulnerabilities as they only contain human-readable strings used for UI localization. The changes include: - Updated translation metadata (dates, translator information) - Modified Danish translations for various UI strings - Removal of fuzzy translation markers - Updated translation content Since this is purely a localization file with no code changes, there are no security vulnerabilities to analyze in this diff.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/de.po 2025-10-27 16:59:44.604383955 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/de.po 2025-10-27 16:59:48.272617742 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin-docs 4.0.0-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-02-14 16:50+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-11-27 12:48+0000\n"+"Last-Translator: Justin Nogossek <[email protected]>\n" "Language-Team: German <https://hosted.weblate.org/projects/phpmyadmin/4-9/de/" ">\n" "Language: de\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.5-dev\n"+"X-Generator: Weblate 4.15-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -10120,18 +10120,6 @@ "zu setzen." #: libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php:28-#, fuzzy-#| msgid ""-#| "LINUX ONLY: Launches an external application and feeds it the column data "-#| "via standard input. Returns the standard output of the application. The "-#| "default is Tidy, to pretty-print HTML code. For security reasons, you "-#| "have to manually edit the file libraries/classes/Plugins/Transformations/"-#| "Output/Text_Plain_External.php and list the tools you want to make "-#| "available. The first option is then the number of the program you want to "-#| "use and the second option is the parameters for the program. The third "-#| "option, if set to 1, will convert the output using htmlspecialchars() "-#| "(Default 1). The fourth option, if set to 1, will prevent wrapping and "-#| "ensure that the output appears all on one line (Default 1)." msgid "" "LINUX ONLY: Launches an external application and feeds it the column data " "via standard input. Returns the standard output of the application. The "@@ -10144,18 +10132,17 @@ "(Default 1). The fourth option, if set to 1, will prevent wrapping and " "ensure that the output appears all on one line (Default 1)." msgstr ""-"NUR FÜR LINUX: Startet ein externes Programm und verwendet die Daten der "-"Spalte für die Standardeingabe. Gibt die Standardausgabe der Anwendung "-"zurück. Die Voreinstellung wurde für Tidy optimiert, um HTML code optisch zu "-"formatieren. Aus Sicherheitsgründen müssen Sie die Datei libraries/classes/"-"Plugins/Transformations/Output/Text_Plain_External.php von Hand bearbeiten, "-"um weitere Programme verfügbar zu machen. Die erste Option ist die Nummer "-"des dort hinterlegten Programmes und die zweite Option legt die Parameter "-"für das externe Programm fest. Die dritte Option bestimmt, falls auf 1 "-"gesetzt, dass die Ausgabe mit htmlspecialchars() formatiert wird (Standard: "-"1). Die vierte Option bestimmt, falls auf 1 gesetzt, ob ein NOWRAP-Parameter "-"der Tabellenzelle hinzugefügt wird, um einen automatischen Umbruch der "-"Standardausgabe zu verhindern (Standard: 1)."+"NUR LINUX: Startet eine externe Anwendung und füttert sie mit den "+"Spaltendaten über die Standardeingabe. Gibt die Standardausgabe der "+"Anwendung zurück. Der Standardwert ist Tidy, um HTML-Code schön auszugeben. "+"Aus Sicherheitsgründen müssen Sie die Datei libraries/classes/Plugins/"+"Transformations/Abs/ExternalTransformationsPlugin.php manuell bearbeiten und "+"die Tools auflisten, die Sie verfügbar machen möchten. Die erste Option ist "+"dann die Nummer des Programms, das Sie verwenden möchten. Die zweite Option "+"sollte aus historischen Gründen leer bleiben. Die dritte Option, wenn auf 1 "+"gesetzt, konvertiert die Ausgabe mit htmlspecialchars() (Standard 1). Die "+"vierte Option verhindert, wenn sie auf 1 gesetzt ist, einen Zeilenumbruch "+"und stellt sicher, dass die Ausgabe in einer Zeile erscheint (Standard 1)." #: libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php:114 #, php-format@@ -10164,6 +10151,9 @@ "has been deprecated for security reasons. Add all command line options " "directly to the definition in %s." msgstr ""+"Sie verwenden das Befehlszeilenoptionsfeld für die externe Umwandlung, das "+"aus Sicherheitsgründen veraltet ist. Fügen Sie alle Befehlszeilenoptionen "+"direkt zur Definition in %s hinzu." #: libraries/classes/Plugins/Transformations/Abs/FormattedTransformationsPlugin.php:28 msgid ""@@ -12068,7 +12058,7 @@ "system." msgstr "" "Bitte beachten Sie jedoch, dass diese Empfehlungen auf einfachen "-"Berechnungen und Faustregeln basieren und nicht umbedingt auf Ihrem System "+"Berechnungen und Faustregeln basieren und nicht unbedingt auf Ihrem System " "funktionieren müssen." #: libraries/classes/Server/Status/Advisor.php:48@@ -16541,7 +16531,7 @@ #: templates/table/relation/common_form.twig:6 msgid "Foreign key constraints"-msgstr "Beschränkungen durch Fremdschlüssel"+msgstr "Fremdschlüssel-Beschränkungen" #: templates/table/relation/common_form.twig:10 msgid "Actions"@@ -16570,7 +16560,7 @@ #: templates/table/relation/common_form.twig:24 msgid "Foreign key constraint"-msgstr "Beschränkung für auswärtige Schlüssel"+msgstr "Fremdschlüssel-Beschränkung" #: templates/table/relation/common_form.twig:89 msgid "+ Add constraint"
Vulnerability Existed: not sure CWE-XXX - CWE-ID-unknown - po/de.po Lines 10120-10132 Old Code: ``` #: libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php:28 #, fuzzy #| msgid "" #| "LINUX ONLY: Launches an external application and feeds it the column data " #| "via standard input. Returns the standard output of the application. The " #| "default is Tidy, to pretty-print HTML code. For security reasons, you " #| "have to manually edit the file libraries/classes/Plugins/Transformations/" #| "Output/Text_Plain_External.php and list the tools you want to make " #| "available. The first option is then the number of the program you want to " #| "use and the second option is the parameters for the program. The third " #| "option, if set to 1, will convert the output using htmlspecialchars() " #| "(Default 1). The fourth option, if set to 1, will prevent wrapping and " #| "ensure that the output appears all on one line (Default 1)." msgid "" "LINUX ONLY: Launches an external application and feeds it the column data " "via standard input. Returns the standard output of the application. The " "default is Tidy, to pretty-print HTML code. For security reasons, you " "have to manually edit the file libraries/classes/Plugins/Transformations/" "Output/Text_Plain_External.php and list the tools you want to make " "available. The first option is then the number of the program you want to " "use and the second option is the parameters for the program. The third " "option, if set to 1, will convert the output using htmlspecialchars() " "(Default 1). The fourth option, if set to 1, will prevent wrapping and " "ensure that the output appears all on one line (Default 1)." ``` Fixed Code: ``` msgid "" "LINUX ONLY: Launches an external application and feeds it the column data " "via standard input. Returns the standard output of the application. The " "default is Tidy, to pretty-print HTML code. For security reasons, you " "have to manually edit the file libraries/classes/Plugins/Transformations/" "Abs/ExternalTransformationsPlugin.php and list the tools you want to make " "available. The first option is then the number of the program you want to " "use. The second option should be left blank for historical reasons. The " "third option, if set to 1, will convert the output using htmlspecialchars() " "(Default 1). The fourth option, if set to 1, will prevent wrapping and " "ensure that the output appears all on one line (Default 1)." ``` Note: This appears to be a localization file update where the German translation was corrected to reflect security-related changes in the ExternalTransformationsPlugin. The changes indicate that command-line parameters should no longer be passed through user input (second option should be blank), which could potentially address a command injection vulnerability (CWE-78). However, since this is just a translation file, the actual security fix would be in the corresponding PHP code.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/el.po 2025-10-27 16:59:44.605384019 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/el.po 2025-10-27 16:59:48.272617742 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-02-10 13:50+0000\n"-"Last-Translator: Michalis <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Greek <https://hosted.weblate.org/projects/phpmyadmin/4-9/el/>" "\n" "Language: el\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.5-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2993,8 +2993,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "ημερολόγιο-μήνας-έτος"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/el.po Various lines [Old translation content] [Updated translation content] Vulnerability Existed: no No specific vulnerability - N/A - po/el.po Lines 2993-2999 [Old translation content] [Updated translation content] Note: This diff shows only translation file updates (po/el.po) which contain localization strings for the Greek language. The changes include: 1. Updated metadata (revision date, translator, generator) 2. Translation updates for specific strings 3. Addition of fuzzy flag for one translation No security vulnerabilities are apparent in these translation file changes, as they only affect localized text display and not application logic or security controls.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/eo.po 2025-10-27 16:59:44.606384083 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/eo.po 2025-10-27 16:59:48.273617806 +0000@@ -7,8 +7,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-09-29 09:44+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Esperanto <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "eo/>\n" "Language: eo\n"@@ -16,7 +16,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.3-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2819,8 +2819,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates. Vulnerability Existed: no No security vulnerabilities identified - N/A - po/eo.po Lines 7-8, 16, 2819-2822 Old Code: "PO-Revision-Date: 2020-09-29 09:44+0000\n" "Last-Translator: William Desportes <[email protected]>\n" ... "X-Generator: Weblate 4.3-dev\n" ... msgid "calendar-month-year" msgstr "" Fixed Code: "PO-Revision-Date: 2022-02-17 10:36+0000\n" "Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" ... "X-Generator: Weblate 4.11-dev\n" ... msgid "calendar-month-year" msgstr "calendar-month-year"
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/es.po 2025-10-27 16:59:44.606384083 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/es.po 2025-10-27 16:59:48.273617806 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-01-22 17:26+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-04-19 18:08+0000\n"+"Last-Translator: Joaquín <[email protected]>\n" "Language-Team: Spanish <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "es/>\n" "Language: es\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.5-dev\n"+"X-Generator: Weblate 4.12-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -544,8 +544,8 @@ "Choose \"ST_GeomFromText\" from the \"Function\" column and paste the string " "below into the \"Value\" field." msgstr ""-"Seleccione «ST_GeomFromText» de la columna \"Función\" y pegue la cadena "-"ubicada debajo en el campo \"Valor\"."+"Seleccione «ST_GeomFromText» de la columna \"Función\" y pegue el texto mas "+"abajo en el campo \"Valor\"." #: import.php:73 msgid "Succeeded"@@ -931,7 +931,7 @@ #: js/messages.php:64 msgid "This operation could take a long time. Proceed anyway?"-msgstr "Esta operación podría llevar algún tiempo. ¿Proceder de todas formas?"+msgstr "Esta operación podría tardar mucho tiempo. ¿Proceder de todas formas?" #: js/messages.php:66 #, php-format@@ -953,12 +953,12 @@ "You are trying to reduce the number of rows, but have already entered data " "in those rows which will be lost. Do you wish to continue?" msgstr ""-"Está intentando reducir el número de filas, pero ya ha introducido datos en "-"esas filas que se perderán. ¿Desea continuar?"+"Estás intentando reducir el número de filas, pero ya hay datos en esas filas "+"que se perderán. ¿Quieres continuar?" #: js/messages.php:74 msgid "Do you really want to revoke the selected user(s) ?"-msgstr "¿Realmente desea eliminar el/los usuario/s seleccionado/s?"+msgstr "¿Realmente desea eliminar los usuarios seleccionados?" #: js/messages.php:76 msgid "Do you really want to delete this central column?"@@ -978,15 +978,15 @@ #: js/messages.php:84 msgid "Do you really want to TRUNCATE the selected partition(s)?"-msgstr "¿Desea realmente TRUNCAR las particiones seleccionadas?"+msgstr "¿Desea realmente CORTAR las particiones seleccionadas?" #: js/messages.php:86 msgid "Do you really want to remove partitioning?"-msgstr "¿Desea realmente eliminar el particionado?"+msgstr "¿Desea realmente eliminar las particiones?" #: js/messages.php:87 msgid "Do you really want to RESET SLAVE?"-msgstr "¿Realmente deseas ejecutar RESET SLAVE?"+msgstr "¿Realmente deseas ejecutar RESET SLAVE ( inicializar el esclavo)?" #: js/messages.php:89 msgid ""@@ -1004,7 +1004,7 @@ #: js/messages.php:95 msgid "Garbled Data"-msgstr "Datos confusos"+msgstr "Datos Dañados" #: js/messages.php:97 msgid "Are you sure you wish to change the collation and convert the data?"@@ -1520,7 +1520,7 @@ "the other attributes of queries, such as start time, may differ." msgstr "" "Esta columna muestra la cantidad de consultas idénticas que fueron "-"agrupadas. Sin embargo, sólo la consulta SQL en sí es es utilizada para "+"agrupadas. Sin embargo, sólo la consulta SQL en sí es utilizada para " "agrupar, por lo que los demás atributos de las consultas como el tiempo de " "inicio podría diferir." @@ -2691,7 +2691,7 @@ "características no funcionan adecuadamente para usted. Es probable que el " "navegador no soporte el almacenamiento de información o se alcanzó el límite " "de cuota. En Firefox, el almacenamiento corrupto también puede causar "-"problemas, limpiar sus \"Datos offline de sitios web\" puede ayudar. En "+"problemas, limpiar sus \"Datos offline de sitios web\" puede ayudar. En " "Safari, este problema es causado comúnmente por la \"Navegación en modo " "privado\"." @@ -2746,7 +2746,7 @@ msgctxt "" "The table already exists in the designer and can not be added once more." msgid "Table %s already exists!"-msgstr "¡La tabla %s ya existe!"+msgstr "La tabla %s ya existe!" #: js/messages.php:756 libraries/classes/InsertEdit.php:289 #: libraries/classes/Navigation/Nodes/NodeDatabaseChild.php:54@@ -3576,7 +3576,7 @@ #: libraries/classes/Charsets.php:679 msgctxt "Collation variant" msgid "kana-sensitive"-msgstr "Sensible al kanatipo"+msgstr "sensible a kana" #: libraries/classes/Charsets.php:683 msgctxt "Collation variant"@@ -3591,7 +3591,7 @@ #: libraries/classes/Charsets.php:689 msgctxt "Collation variant" msgid "no-pad"-msgstr "sin relleno"+msgstr "sin espacios" #: libraries/classes/Config.php:1132 #, php-format@@ -4466,9 +4466,9 @@ "features, see [doc@linked-tables]phpMyAdmin configuration storage[/doc] in " "documentation." msgstr ""-"Configure la base de datos de phpMyAdmin para obtener acceso a funciones "-"adicionales, mire [doc@linked-tables]linked-tables infrastructure[/doc] en "-"la documentación."+"Configure la confuguración de almacenamiento de phpMyAdmin para obtener "+"acceso a funciones adicionales, vea [doc@linked-tables] Configuración de "+"almacenamiento de phpMyAdmin[/doc] en la documentación." #: libraries/classes/Config/Descriptions.php:546 msgid "Changes tracking"@@ -5372,9 +5372,9 @@ "storage; leave blank to use the default port, or the already defined port, " "if the controlhost equals host." msgstr ""-"Puerto alternativo para conectarse al servidor que posee el almacenamiento "-"de configuración; deje vacío para utilizar el puerto predeterminado o el "-"puerto ya definido si el el servidor de control es el mismo."+"Un puerto alternativo para conectarse al servidor que posee el "+"almacenamiento de configuración; deje vacío para utilizar el puerto "+"predeterminado o el puerto ya definido si el servidor de control es el mismo." #: libraries/classes/Config/Descriptions.php:1036 msgid "Control port"@@ -6729,7 +6729,7 @@ #, php-format msgid "%1$d database has been dropped successfully." msgid_plural "%1$d databases have been dropped successfully."-msgstr[0] "%1$d bases de datos han sido eliminadas exitosamente."+msgstr[0] "%1$d base de datos ha sido eliminadas exitosamente." msgstr[1] "%1$d bases de datos han sido eliminadas exitosamente." #: libraries/classes/Controllers/Server/ServerDatabasesController.php:343@@ -6967,18 +6967,14 @@ msgstr "No se pudieron cargar los plugins de esquema. ¡Revise su instalación!" #: libraries/classes/Database/Designer/Common.php:518-#, fuzzy-#| msgid ""-#| "The configuration storage is not ready for the central list of columns "-#| "feature." msgctxt "" "phpMyAdmin configuration storage is not configured for \"Display Features\" " "on designer when user tries to set a display field." msgid "" "phpMyAdmin configuration storage is not configured for \"Display Features\"." msgstr ""-"El almacenamiento de configuración no está preparado para la funcionalidad "-"de lista central de columnas."+"El almacenamiento de configuración de phpMyAdmin no está configurado para "+"\"Características de visualización\"." #: libraries/classes/Database/Designer/Common.php:565 msgid "Error: relationship already exists."@@ -8512,7 +8508,7 @@ msgid "%s result found" msgid_plural "%s results found" msgstr[0] "Se encontró %s resultado adicional"-msgstr[1] "Se encontró %s resultado adicional"+msgstr[1] "Se encontraron %s resultados adicionales" #: libraries/classes/Navigation/NavigationTree.php:1368 #: libraries/classes/Navigation/NavigationTree.php:1400@@ -8774,7 +8770,7 @@ #: libraries/classes/Normalization.php:341 msgid "No repeating group"-msgstr "Niguna columna redundante"+msgstr "Sin grupo repetitivo" #: libraries/classes/Normalization.php:370 msgid "Step 2."@@ -9301,8 +9297,7 @@ #: libraries/classes/Plugins/AuthenticationPlugin.php:338 msgid "You have enabled two factor authentication, please confirm your login." msgstr ""-"Ha habilitado el factor de doble autentificación, confirme su inicio de "-"sesión por favor."+"Tienes activo el factor de doble autenticacion, por favor confirma tu acceso." #: libraries/classes/Plugins/Export/ExportCodegen.php:101 #: templates/display/import/import.twig:168@@ -10103,18 +10098,6 @@ "usa esta última, la primer opción tiene que ser una cadena vacía." #: libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php:28-#, fuzzy-#| msgid ""-#| "LINUX ONLY: Launches an external application and feeds it the column data "-#| "via standard input. Returns the standard output of the application. The "-#| "default is Tidy, to pretty-print HTML code. For security reasons, you "-#| "have to manually edit the file libraries/classes/Plugins/Transformations/"-#| "Output/Text_Plain_External.php and list the tools you want to make "-#| "available. The first option is then the number of the program you want to "-#| "use and the second option is the parameters for the program. The third "-#| "option, if set to 1, will convert the output using htmlspecialchars() "-#| "(Default 1). The fourth option, if set to 1, will prevent wrapping and "-#| "ensure that the output appears all on one line (Default 1)." msgid "" "LINUX ONLY: Launches an external application and feeds it the column data " "via standard input. Returns the standard output of the application. The "@@ -10131,11 +10114,11 @@ "columna mediante entrada estándar. Devuelve la salida estándar de la " "aplicación. El valor predeterminado es Tidy para mostrar código HTML " "agradable para la impresión. Por razones de seguridad, debe editar "-"manualmente el archivo libraries/classes/Plugins/Transformations/Output/"-"Text_Plain_External.php y agregar las herramientas que permitirá ejecutar. "-"La primera opción será el número del programa que querrá utilizar y la "-"segunda opción los parámetros para dicho programa. Si el tercer parámetro es "-"1 (el valor predeterminado), se convertirá la salida utilizando "+"manualmente el archivo libraries/classes/Plugins/Transformations/Abs/"+"ExternalTransformationsPlugin.php y agregar las herramientas que permitirá "+"ejecutar. La primera opción será el número del programa que querrá utilizar. "+"La segunda debería ser en blanco por razones históricas. Si el tercer "+"parámetro es 1 (el valor predeterminado), se convertirá la salida utilizando " "htmlspecialchars(). La cuarta opción, de ser 1 (el valor predeterminado), " "evitará separar la salida en varias líneas asegurando que aparezca completa " "en una sola línea."@@ -10147,6 +10130,10 @@ "has been deprecated for security reasons. Add all command line options " "directly to the definition in %s." msgstr ""+"Está utilizando el campo de opciones de línea de comandos de la "+"transformación externa, que ha quedado obsoleto por motivos de seguridad. "+"Añada todas las opciones de línea de comandos directamente a la definición "+"en %s." #: libraries/classes/Plugins/Transformations/Abs/FormattedTransformationsPlugin.php:28 msgid ""@@ -13176,7 +13163,7 @@ #: libraries/classes/Server/UserGroups.php:159 #: libraries/classes/Server/UserGroups.php:225 msgid "Add user group"-msgstr "Agregar groupo de usuarios"+msgstr "Agregar grupo de usuarios" #: libraries/classes/Server/UserGroups.php:228 #, php-format@@ -13312,7 +13299,7 @@ #: libraries/classes/SqlQueryForm.php:260 msgid "Bind parameters"-msgstr "Parámetros enlazados"+msgstr "Vincular parámetros" #: libraries/classes/SqlQueryForm.php:308 msgid "Bookmark this SQL query:"@@ -13692,8 +13679,8 @@ "A bit-field type (M), storing M of bits per value (default is 1, maximum is " "64)" msgstr ""-"Una máscara de bits (M), almacenando M bits por valor (valor predeterminado "-"de 1, máximo de 64)"+"Una máscara de bits (M), almacenando M bits por valor (predeterminado de 1, "+"máximo de 64)" #: libraries/classes/Types.php:258 msgid ""@@ -14191,7 +14178,7 @@ #: libraries/db_common.inc.php:151 tbl_operations.php:224 msgid "No collation provided."-msgstr ""+msgstr "No se proporcionó reglas de clasificación." #: libraries/mult_submits.inc.php:337 msgid "Success!"@@ -14582,10 +14569,8 @@ #. l10n: In case a SQL query did not pass a security check #: tbl_get_field.php:46 transformation_wrapper.php:69-#, fuzzy-#| msgid "There are too many joins without indexes." msgid "There is an issue with your request."-msgstr "Hay demasiadas uniones («JOIN») sin índices."+msgstr "Hay un problema con tu petición." #: tbl_replace.php:258 #, php-format@@ -14699,7 +14684,7 @@ #: templates/display/export/options_output.twig:51 #, php-format msgid "Skip tables larger than %s MiB"-msgstr "Omitir tablas mayores a %s MiB"+msgstr "Omitir tablas de más de %s MiB" #: templates/table/search/table_header.twig:9 #: templates/database/designer/having_query_panel.twig:30@@ -14965,10 +14950,9 @@ msgstr "Ver estructura de tabla" #: templates/database/designer/database_tables.twig:91-#, fuzzy, php-format-#| msgid "Select all"+#, php-format msgid "Select \"%s\""-msgstr "Seleccionar todo"+msgstr "Seleccionar \"%s\"" #: templates/database/designer/database_tables.twig:126 #, php-format@@ -15146,7 +15130,7 @@ #: templates/prefs_twofactor.twig:3 msgid "Two-factor authentication status"-msgstr "Estado del factor de doble autentificación"+msgstr "Estado de autenticación de dos factores" #: templates/prefs_twofactor.twig:9 msgid ""@@ -15178,8 +15162,8 @@ "Two-factor authentication is not available, enable phpMyAdmin configuration " "storage to use it." msgstr ""-"El factor de doble autentificación no está disponible, habilite el "-"almacenamiento de configuración phpMyAdmin para utilizarlo."+"La autenticación de dos factores no está disponible, habilite el "+"almacenamiento de configuración de phpMyAdmin para usarla." #: templates/prefs_twofactor.twig:33 msgid "You have enabled two factor authentication."@@ -15187,12 +15171,12 @@ #: templates/prefs_twofactor.twig:37 templates/prefs_twofactor_confirm.twig:9 msgid "Disable two-factor authentication"-msgstr "Desactivar el factor de doble autentificación"+msgstr "Desactivar la autenticación de doble factor" #: templates/prefs_twofactor.twig:43 templates/prefs_twofactor.twig:54 #: templates/prefs_twofactor_configure.twig:2 msgid "Configure two-factor authentication"-msgstr "Configurar factor de doble autentificación"+msgstr "Configurar autenticación en dos pasos" #: templates/privileges/add_privileges_database.twig:1 msgid "Add privileges on the following database(s):"@@ -15239,7 +15223,7 @@ #: templates/login/twofactor/application.twig:2 #: templates/login/twofactor/application_configure.twig:21 msgid "Authentication code:"-msgstr "Código de autentificación:"+msgstr "Codigo de autenticación:" #: templates/login/twofactor/application.twig:4 msgid ""@@ -15494,7 +15478,7 @@ #: templates/prefs_twofactor_confirm.twig:2 msgid "Confirm disabling two-factor authentication"-msgstr "Confirmar la desactivación del factor de doble autentificación"+msgstr "Confirmar la desactivación de la autenticación de dos factores" #: templates/prefs_twofactor_confirm.twig:5 msgid ""@@ -15605,7 +15589,7 @@ #: templates/server/sub_page_header.twig:2 msgid "Character sets and collations"-msgstr "Conjunto de caracteres y cotejamientos"+msgstr "Conjunto de caracteres y sus cotejamientos" #: templates/server/sub_page_header.twig:2 msgid "Databases statistics"@@ -16183,8 +16167,8 @@ "The configured two factor authentication is not available, please install " "missing dependencies." msgstr ""-"El factor de doble autentificación configurado no está disponible, por favor "-"instale las dependencias que faltan."+"La autenticación de dos factores configurada no está disponible, instale las "+"dependencias que faltan." #: templates/columns_definitions/column_name.twig:4 #, php-format@@ -16207,7 +16191,7 @@ #: templates/prefs_twofactor_configure.twig:8 msgid "Enable two-factor authentication"-msgstr "Activar factor de doble autentificación"+msgstr "Habilitar el doble factor de autenticación" # male gender due to referring to encoding modes #: templates/encoding/kanji_encoding_form.twig:6@@ -16369,7 +16353,7 @@ #: templates/database/designer/table_list.twig:14 msgid "Hide/Show tables with no relationship"-msgstr "Ocultar / Mostrar tablas sin relación"+msgstr "Ocultar/Mostrar tablas sin relación" #: templates/database/designer/table_list.twig:25 msgid "Number of tables:"@@ -16382,32 +16366,32 @@ #: templates/database/multi_table_query/form.twig:33 #: templates/database/multi_table_query/form.twig:121 msgid "select table"-msgstr "Seleccionar tabla"+msgstr "seleccionar tabla" #: templates/database/multi_table_query/form.twig:40 #: templates/database/multi_table_query/form.twig:129 msgid "select column"-msgstr "Seleccionar columna"+msgstr "seleccionar columna" #: templates/database/multi_table_query/form.twig:46 msgid "Table alias"-msgstr "Alias de tabla"+msgstr "Alias de la tabla" #: templates/database/multi_table_query/form.twig:47 msgid "Column alias"-msgstr "Alias de columna"+msgstr "Alias de la columna" #: templates/database/multi_table_query/form.twig:50 msgid "Use this column in criteria"-msgstr "Utilice esta columna en las condiciones"+msgstr "Utilice esta columna en el punto" #: templates/database/multi_table_query/form.twig:53 msgid "criteria"-msgstr "condiciones"+msgstr "criterio" #: templates/database/multi_table_query/form.twig:67 msgid "Add as"-msgstr "Añadir como"+msgstr "Agregar \"as\"" #: templates/database/multi_table_query/form.twig:112 msgid "Another column"@@ -16423,7 +16407,7 @@ #: templates/database/multi_table_query/form.twig:175 msgid "Update query"-msgstr "Actualizar consulta"+msgstr "Actualizar la consulta" #: templates/server/binlog/log_selector.twig:5 msgid "Select binary log to view"@@ -16471,7 +16455,7 @@ #: templates/theme_preview.twig:13 msgid "Take it"-msgstr "Tómelo"+msgstr "Escoger" #: templates/prefs_autoload.twig:7 msgid ""
Based on the provided diff content, I will analyze it for security fixes.
**Analysis:**
The diff shows changes to a translation file (`po/es.po`). Translation files typically contain user interface strings and do not contain executable code. Security vulnerabilities are usually found in source code files (like .php, .js, etc.) rather than in localization/translation files.
Looking at the changes:
- Updated translation strings (Spanish)
- Changed dates and translator information
- Minor text corrections and improvements
- No modifications to actual application logic or security-sensitive code
Since this is purely a localization file update with no code changes, there are no security vulnerabilities being fixed here.
**Answer:**
Vulnerability Existed: no
No vulnerabilities found - Translation file update only - po/es.po All lines
[Old translation strings]
[Updated translation strings]
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/et.po 2025-10-27 16:59:44.607384146 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/et.po 2025-10-27 16:59:48.274617869 +0000@@ -6,7 +6,7 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-02-08 10:50+0000\n"+"PO-Revision-Date: 2022-08-21 15:21+0000\n" "Last-Translator: Kristjan Räts <[email protected]>\n" "Language-Team: Estonian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "et/>\n"@@ -15,7 +15,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.5-dev\n"+"X-Generator: Weblate 4.14-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2950,7 +2950,7 @@ #. #: js/messages.php:899 msgid "calendar-month-year"-msgstr "kalender-kuu-aasta"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -16163,7 +16163,7 @@ #: templates/table/relation/common_form.twig:6 msgid "Foreign key constraints"-msgstr "Võõrvõtme piirangud"+msgstr "välisvõtme piirangud" #: templates/table/relation/common_form.twig:10 msgid "Actions"@@ -16191,7 +16191,7 @@ #: templates/table/relation/common_form.twig:24 msgid "Foreign key constraint"-msgstr "Võõrvõtme piirang"+msgstr "välisvõtme piirang" #: templates/table/relation/common_form.twig:89 msgid "+ Add constraint"
Vulnerability Existed: no No vulnerabilities found in the provided diff. Explanation: The diff shows changes to a translation file (et.po) for Estonian language strings. The modifications are: 1. Updated revision date and generator version 2. Changed translation of "calendar-month-year" from Estonian back to English 3. Updated translations for "Foreign key constraints" and "Foreign key constraint" (minor wording changes) These changes are purely linguistic/translation updates and don't involve any code logic, security controls, or vulnerability fixes. Translation files contain human-readable strings and don't execute code, so changes to them don't typically introduce or fix security vulnerabilities.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/eu.po 2025-10-27 16:59:44.607384146 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/eu.po 2025-10-27 16:59:48.274617869 +0000@@ -4,16 +4,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2017-10-18 02:39+0000\n"-"Last-Translator: iF <[email protected]>\n"-"Language-Team: Basque <https://hosted.weblate.org/projects/phpmyadmin/master/"-"eu/>\n"+"PO-Revision-Date: 2022-11-27 12:48+0000\n"+"Last-Translator: Jon Ander Gainzarain <[email protected]>\n"+"Language-Team: Basque <https://hosted.weblate.org/projects/phpmyadmin/4-9/eu/"+">\n" "Language: eu\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 2.17\n"+"X-Generator: Weblate 4.15-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -328,21 +328,19 @@ msgid "" "The phpMyAdmin configuration storage has been deactivated. %sFind out why%s." msgstr ""+"PhpMyAdmin-eko konfigurazio biltegia ezgaitu egin da. %sIkusi zergatia%s." #: db_qbe.php:133 msgid "You have to choose at least one column to display!" msgstr "Gutxienez bistaratzeko Zutabe bat hautatu duzu!" #: db_qbe.php:145 templates/database/multi_table_query/form.twig:3-#, fuzzy-#| msgid "in query" msgid "Multi-table query"-msgstr "kontsultan"+msgstr "Taula anitzeko kontsulta" #: db_qbe.php:149 templates/database/multi_table_query/form.twig:3-#, fuzzy msgid "Query by example"-msgstr "Kontsulta mota"+msgstr "Adibidetan oinarritutako kontsulta" #: db_qbe.php:168 #, php-format@@ -538,16 +536,12 @@ msgstr "Irteera" #: gis_data_editor.php:423-#, fuzzy-#| msgid ""-#| "Choose \"GeomFromText\" from the \"Function\" column and paste the string "-#| "below into the \"Value\" field." msgid "" "Choose \"ST_GeomFromText\" from the \"Function\" column and paste the string " "below into the \"Value\" field." msgstr ""-"\"funtzio\" zutabetik \"GeomFromText\" hauta eta peko katea \"balorea\" "-"eremuan itsatsi."+"\"Function\" zutabetik \"ST_GeomFromText\" aukeratu eta itsatsi ondorengo "+"katea \"Value\" gelaxkan." #: import.php:73 msgid "Succeeded"@@ -591,20 +585,19 @@ #: import.php:547 libraries/classes/Display/Import.php:56 msgid "Could not load import plugins, please check your installation!" msgstr ""+"Ezin izan dira gehigarriak inportatu, mesedez, begiratu zure instalazioa!" #: import.php:587 libraries/classes/Sql.php:827 libraries/classes/Sql.php:1631-#, fuzzy, php-format-#| msgid "Bookmark %s created"+#, php-format msgid "Bookmark %s has been created."-msgstr "%s laster-marka sortu da"+msgstr "%s laster-marka sortu da." #: import.php:597-#, fuzzy, php-format-#| msgid "Import has been successfully finished, %d queries executed."+#, php-format msgid "Import has been successfully finished, %d query executed." msgid_plural "Import has been successfully finished, %d queries executed." msgstr[0] "Inportatzea zuzen burutu da, %d kontsulta exekutatuta_."-msgstr[1] "Inportatzea zuzen burutu da, %d kontsulta exekutatuta_."+msgstr[1] "Inportatzea zuzen burutu da, %d kontsultak exekutatuta_." #: import.php:628 #, php-format@@ -612,6 +605,8 @@ "Script timeout passed, if you want to finish import, please %sresubmit the " "same file%s and import will resume." msgstr ""+"Script-eko denbora muga gainditu da, inportatzea amaitu nahi baduzu, "+"mesedez, %sbirbidali fitxategi berdina%s eta inportatzeak jarraituko du." #: import.php:638 msgid ""@@ -3182,8 +3177,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No vulnerability found - N/A - po/eu.po N/A This is a translation file update containing only localization changes (Basque language translations). No security vulnerabilities are present in translation files as they don't contain executable code. The diff shows: - Updated translation metadata (dates, translators, generator) - Improved Basque translations for various UI strings - Removal of fuzzy translation markers - No code changes that could introduce security issues Since translation files (.po) only contain localized text strings and no executable code, they cannot contain security vulnerabilities that would be fixed through translation updates.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/fa.po 2025-10-27 16:59:44.607384146 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/fa.po 2025-10-27 16:59:48.274617869 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-12-09 16:23+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Persian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "fa/>\n" "Language: fa\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n > 1;\n"-"X-Generator: Weblate 4.10-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3148,8 +3148,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "تقویم-ماه-سال"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff content, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates. Vulnerability Existed: no No security vulnerabilities identified in this translation file update Explanation: - The diff shows changes to a translation file (po/fa.po) which contains Persian language translations - Changes include: - Updated revision date and translator information - Updated generator version - Minor translation adjustments (e.g., changing "تقویم-ماه-سال" to "calendar-month-year") - Translation files typically don't contain executable code and are not vectors for security vulnerabilities - These changes appear to be routine maintenance and translation improvements rather than security fixes
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/fi.po 2025-10-27 16:59:44.608384210 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/fi.po 2025-10-27 16:59:48.274617869 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-05-20 08:29+0000\n"-"Last-Translator: Riku Viitanen <[email protected]>\n"+"PO-Revision-Date: 2022-03-25 16:09+0000\n"+"Last-Translator: Etunimi <[email protected]>\n" "Language-Team: Finnish <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "fi/>\n" "Language: fi\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.1-dev\n"+"X-Generator: Weblate 4.12-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2974,8 +2974,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "kalenteri-kuukausi-vuosi"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -9280,7 +9281,7 @@ #: templates/login/header.twig:5 #, php-format msgid "Welcome to %s"-msgstr "Tervetuloa, toivottaa %s"+msgstr "Tervetuloa: %s" #: libraries/classes/Plugins/Auth/AuthenticationConfig.php:105 #, php-format
Vulnerability Existed: no No specific vulnerability identified in this translation file update. The provided diff shows changes to a translation file (fi.po) which contains only localization strings. These changes include: - Updated translation metadata (revision date, translator) - Modified Finnish translations for some strings - Added a fuzzy flag to one translation Since translation files don't contain executable code and only store user interface text, they don't typically introduce security vulnerabilities. The changes appear to be routine translation updates rather than security fixes.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/fr.po 2025-10-27 16:59:44.609384274 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/fr.po 2025-10-27 16:59:48.275617933 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin-docs 4.0.0-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-04-26 13:32+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-05-13 15:16+0000\n"+"Last-Translator: tiemen <[email protected]>\n" "Language-Team: French <https://hosted.weblate.org/projects/phpmyadmin/4-9/fr/" ">\n" "Language: fr\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n > 1;\n"-"X-Generator: Weblate 4.7-dev\n"+"X-Generator: Weblate 4.13-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -15999,12 +15999,12 @@ #: templates/display/results/options_block.twig:79 #: templates/display/results/options_block.twig:96 msgid "Well Known Text"-msgstr "Well Known Text"+msgstr "Texte bien connu" #: templates/display/results/options_block.twig:79 #: templates/display/results/options_block.twig:96 msgid "Well Known Binary"-msgstr "Well Known Binary"+msgstr "Binaire bien connu" #: templates/server/variables/variable_row.twig:6 msgid "This is a read-only variable and can not be edited"
Vulnerability Existed: no No specific vulnerability - N/A - po/fr.po Various lines [Old Code] Various French translation strings [Fixed Code] Updated French translation strings Vulnerability Existed: no No specific vulnerability - N/A - po/fr.po Metadata lines [Old Code] "PO-Revision-Date: 2021-04-26 13:32+0000" "Last-Translator: William Desportes <[email protected]>" "X-Generator: Weblate 4.7-dev" [Fixed Code] "PO-Revision-Date: 2022-05-13 15:16+0000" "Last-Translator: tiemen <[email protected]>" "X-Generator: Weblate 4.13-dev"
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/gl.po 2025-10-27 16:59:44.609384274 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/gl.po 2025-10-27 16:59:48.276617997 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-01-22 02:40+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Galician <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "gl/>\n" "Language: gl\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.5-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2981,8 +2981,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "calendario-mes-ano"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. This appears to be a standard translation file update with no security-related changes. Vulnerability Existed: no No security vulnerabilities identified in this translation file update The changes shown are: 1. Updated translation metadata (dates, translator information, generator version) 2. A single translation string change from "calendario-mes-ano" to "calendar-month-year" with a fuzzy flag 3. No code logic changes that could introduce or fix security vulnerabilities Translation files (.po) typically contain only user-facing text and do not affect application security unless they contain executable code, which is not the case here.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/he.po 2025-10-27 16:59:44.610384338 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/he.po 2025-10-27 16:59:48.276617997 +0000@@ -4,7 +4,7 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-07-22 19:34+0000\n"+"PO-Revision-Date: 2023-01-19 03:17+0000\n" "Last-Translator: Yaron Shahrabani <[email protected]>\n" "Language-Team: Hebrew <https://hosted.weblate.org/projects/phpmyadmin/4-9/he/" ">\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=(n != 1);\n"-"X-Generator: Weblate 4.7.2-dev\n"+"X-Generator: Weblate 4.15.1-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -15989,6 +15989,7 @@ "Let the server run for a longer time until it has executed a greater amount " "of queries." msgstr ""+"לאפשר לשרת לעבוד לפרק זמן ארוך יותר עד שישלים מספר גדול יותר של שאילתות." #: libraries/advisory_rules_generic.txt:61 #, php-format
Vulnerability Existed: no No specific vulnerability - N/A - po/he.po N/A [Old translation file with older metadata] [Updated translation file with newer metadata]
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/hi.po 2025-10-27 16:59:44.611384402 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/hi.po 2025-10-27 16:59:48.277618060 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-11-16 03:28+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-03-13 13:59+0000\n"+"Last-Translator: bashishtha <[email protected]>\n" "Language-Team: Hindi <https://hosted.weblate.org/projects/phpmyadmin/4-9/hi/>" "\n" "Language: hi\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.4-dev\n"+"X-Generator: Weblate 4.12-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -336,10 +336,8 @@ msgstr "बोहोत सारे टेबल आदेश" #: db_qbe.php:149 templates/database/multi_table_query/form.twig:3-#, fuzzy-#| msgid "Query cache" msgid "Query by example"-msgstr "क्वेरी कैश"+msgstr "उदाहरण से क्वेरी" #: db_qbe.php:168 #, php-format@@ -533,15 +531,12 @@ msgstr "आउटपुट" #: gis_data_editor.php:423-#, fuzzy-#| msgid ""-#| "Choose \"GeomFromText\" from the \"Function\" column and paste the string "-#| "below into the \"Value\" field." msgid "" "Choose \"ST_GeomFromText\" from the \"Function\" column and paste the string " "below into the \"Value\" field." msgstr ""-"\"फलन \" स्तंभ से \"GeomFromText\" चुनें और \"Value\" क्षेत्र में नीचे स्ट्रिंग पेस्ट करे."+"\"फंक्शन\" कॉलम से \"ST_GeomFromText\" चुनें और स्ट्रिंग को \"Value\" क्षेत्"+"र में नीचे पेस्ट करें." #: import.php:73 msgid "Succeeded"@@ -782,17 +777,17 @@ "सूचना देना बंद कि गइ है." #: index.php:543-#, fuzzy msgid "" "Your PHP parameter [a@https://secure.php.net/manual/en/session.configuration." "php#ini.session.gc-maxlifetime@_blank]session.gc_maxlifetime[/a] is lower " "than cookie validity configured in phpMyAdmin, because of this, your login " "might expire sooner than configured in phpMyAdmin." msgstr ""-"आपका PHP पैरामीटर [a https: //secure.php.net/manual/en/session.configuration."-"php#ini.session.gc-maxlifetime@_blank] 1session.gc_maxlifetime [/ a] 2 कुकी "-"की वैधता की तुलना में कम है PhpMyAdmin में, इस वजह से, आपका लॉगिन phpMyAdmin में "-"कॉन्फ़िगर की तुलना में जल्दी समाप्त हो सकता है।"+"PhpMyAdmin में आपका PHP पैरामीटर\n"+"[a@https://secure.php.net/manual/en/session.configuration.php#ini.session.gc-"+"maxlifetime@_blank] session.gc_maxlifetime[/a] कुकी की वैधता की तुलना में कम "+"है, इस वजह से, आपका लॉगिन phpMyAdmin में कॉन्फ़ि़गर की गई अवधि से पहले समाप्"+"त हो सकता है." #: index.php:562 #, fuzzy@@ -3142,8 +3137,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "कैलेण्डर-माह-वर्ष"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/hi.po N/A [Old Code] Various translation strings [Fixed Code] Updated translation strings and metadata Vulnerability Existed: no No specific vulnerability - N/A - po/hi.po N/A [Old Code] Translation metadata and content [Fixed Code] Updated translation metadata and content Note: This diff shows changes to a translation file (po/hi.po) which contains localized strings for the Hindi language version of phpMyAdmin. The changes include: 1. Updated translation metadata (revision date, translator, generator) 2. Improved Hindi translations for various strings 3. Removal of fuzzy markers indicating translations are now complete 4. No actual code changes that could introduce or fix security vulnerabilities Translation file updates typically don't contain security fixes unless they correct misleading security-related text. In this case, no security vulnerabilities appear to be addressed.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/hr.po 2025-10-27 16:59:44.611384402 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/hr.po 2025-10-27 16:59:48.277618060 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-08-09 15:50+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Croatian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "hr/>\n" "Language: hr\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 4.2-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3136,8 +3136,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/hr.po N/A [The diff shows only translation file updates with metadata changes and translation additions] [Updated metadata (dates, translators, generator) and added translation for "calendar-month-year"] Note: This is a localization/translation file (.po) containing only user interface strings. Changes to translation files typically don't introduce or fix security vulnerabilities as they don't affect code execution. The modifications are limited to translation metadata and content, which are safe changes.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/hu.po 2025-10-27 16:59:44.611384402 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/hu.po 2025-10-27 16:59:48.277618060 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-12-28 12:51+0000\n"-"Last-Translator: f3rr31 <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Péter Báthory <[email protected]>\n" "Language-Team: Hungarian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "hu/>\n" "Language: hu\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.10.1\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -15238,7 +15238,7 @@ #: templates/table/structure/display_partitions.twig:135 msgid "Partition table"-msgstr "Partíciós tábla"+msgstr "Tábla particionálása" #: templates/table/structure/display_partitions.twig:141 #: templates/table/structure/partition_definition_form.twig:6
Based on the provided code diff, I cannot identify any security vulnerabilities. The changes appear to be translation updates and metadata modifications. Vulnerability Existed: no No security vulnerabilities identified - N/A - po/hu.po [Various lines] Old Code: Various Hungarian translation strings and metadata Fixed Code: Updated Hungarian translation strings and metadata Explanation: - The diff shows changes to a translation file (po/hu.po) - Changes include: - Updated revision date - Changed last translator - Updated generator version - Modified translation for "Partition table" from "Partíciós tábla" to "Tábla particionálása" - These are localization/translation updates and do not affect security - No code execution, input validation, or security-related functionality is modified - Translation files typically don't contain security-sensitive code logic
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ia.po 2025-10-27 16:59:44.612384465 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ia.po 2025-10-27 16:59:48.278618124 +0000@@ -8,8 +8,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-07-19 20:34+0000\n"-"Last-Translator: Giovanni Sora <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Interlingua <https://hosted.weblate.org/projects/phpmyadmin/" "4-9/ia/>\n" "Language: ia\n"@@ -17,7 +17,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.7.2-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3001,8 +3001,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "calendario-mense-anno"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/ia.po Various lines [Old Code] "PO-Revision-Date: 2021-07-19 20:34+0000\n" "Last-Translator: Giovanni Sora <[email protected]>\n" "X-Generator: Weblate 4.7.2-dev\n" msgid "calendar-month-year" msgstr "calendario-mense-anno" [Fixed Code] "PO-Revision-Date: 2022-02-17 10:36+0000\n" "Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "X-Generator: Weblate 4.11-dev\n" msgid "calendar-month-year" msgstr "calendar-month-year" Vulnerability Existed: no No specific vulnerability - N/A - po/ia.po Line 3004 [Old Code] msgstr "calendario-mense-anno" [Fixed Code] msgstr "calendar-month-year"
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/id.po 2025-10-27 16:59:44.613384529 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/id.po 2025-10-27 16:59:48.278618124 +0000@@ -3,8 +3,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-12-05 08:51+0000\n"-"Last-Translator: Hammam Afiq Murtadho <[email protected]>\n"+"PO-Revision-Date: 2022-12-30 07:48+0000\n"+"Last-Translator: Iwan Haryatno <[email protected]>\n" "Language-Team: Indonesian <https://hosted.weblate.org/projects/phpmyadmin/" "4-9/id/>\n" "Language: id\n"@@ -12,7 +12,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 4.10-dev\n"+"X-Generator: Weblate 4.15.1-dev\n" "X-Poedit-Basepath: ../../..\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095@@ -1117,7 +1117,7 @@ #: js/messages.php:142 msgid "Please enter the SQL query first."-msgstr "Masukkan kueri SQL terlebih dahulu."+msgstr "Silakan masukkan kueri SQL dulu." #: js/messages.php:145 msgid "The host name is empty!"@@ -2962,8 +2962,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "Kalender-bulan-tahun"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -5083,8 +5084,8 @@ "Disable the default warning that is displayed on the Structure page if " "column names in a table are reserved MySQL words." msgstr ""-"Nonaktifkan peringatan bawaan yang ditampilkan sewaktu nama kolom dalam "-"tabel tabel telah dipesan oleh MySQL."+"Nonaktifkan peringatan bawaan yang ditampilkan di halaman Struktur sewaktu "+"nama kolom dalam tabel telah dipesan oleh MySQL." #: libraries/classes/Config/Descriptions.php:913 msgid "MySQL reserved word warning"@@ -10434,16 +10435,13 @@ msgstr "Hanya untuk keperluan pengujian!" #: libraries/classes/Plugins/TwoFactorPlugin.php:70-#, fuzzy, php-format-#| msgid "Hardware authentication failed!"+#, php-format msgid "Two-factor authentication failed: %s"-msgstr "Autentikasi perangkat keras gagal!"+msgstr "Autentikasi dua-faktor gagal: %s" #: libraries/classes/Plugins/TwoFactorPlugin.php:74-#, fuzzy-#| msgid "Hardware authentication failed!" msgid "Two-factor authentication failed."-msgstr "Autentikasi perangkat keras gagal!"+msgstr "Autentikasi dua-faktor gagal." #: libraries/classes/Plugins/TwoFactorPlugin.php:127 #, fuzzy@@ -11400,16 +11398,13 @@ msgstr "Anda tidak punya hak akses untuk membuat routine" #: libraries/classes/Rte/Words.php:40-#, fuzzy, php-format-#| msgid ""-#| "No routine with name %1$s found in database %2$s. You might be lacking "-#| "the necessary privileges to edit this routine"+#, php-format msgid "" "No routine with name %1$s found in database %2$s. You might be lacking the " "necessary privileges to edit this routine." msgstr ""-"Tidak ada rutinitas ditemukan dengan nama %1$s dalam database %2$s. Anda "-"mungkin tidak memiliki otoritas untuk menyunting rutinitas ini"+"Tidak ada rutinitas ditemukan dengan nama %1$s dalam database %2$s. Anda "+"mungkin tidak memiliki otoritas untuk menyunting rutinitas ini." #: libraries/classes/Rte/Words.php:44 #, fuzzy, php-format@@ -11424,10 +11419,9 @@ "tidak memiliki otoritas untuk melihat/mengkespor rutinitas ini" #: libraries/classes/Rte/Words.php:47-#, fuzzy, php-format-#| msgid "No routine with name %1$s found in database %2$s"+#, php-format msgid "No routine with name %1$s found in database %2$s."-msgstr "Routine dengan nama %1$s tidak ditemukan dalam basis data %2$s"+msgstr "Routine dengan nama %1$s tidak ditemukan dalam basis data %2$s." #: libraries/classes/Rte/Words.php:48 msgid "There are no routines to display."@@ -17293,7 +17287,7 @@ #, fuzzy, php-format #| msgid "long_query_time is set to %d second(s)." msgid "long_query_time is currently set to %ds."-msgstr "long_query_time disetel menjadi %d detik."+msgstr "long_query_time saat ini disetel menjadi %d detik." #: libraries/advisory_rules_generic.txt:84 #: libraries/advisory_rules_generic.txt:91@@ -17386,10 +17380,8 @@ msgstr "Versi kurang dari 5.5.8 (GA rilis pertama dari 5.5)." #: libraries/advisory_rules_generic.txt:118-#, fuzzy-#| msgid "You should upgrade, to a stable version of MySQL 5.5" msgid "You should upgrade, to a stable version of MySQL 5.5."-msgstr "Anda harus memperbarui ke versi stabil MySQL 5.5"+msgstr "Anda harus meng-upgrade, ke versi stabil MySQL 5.5." #: libraries/advisory_rules_generic.txt:121 #: libraries/advisory_rules_generic.txt:128@@ -17397,20 +17389,18 @@ msgstr "Distribusi" #: libraries/advisory_rules_generic.txt:124-#, fuzzy msgid "Version is compiled from source, not a MySQL official binary." msgstr "Versi dikompilasi dari sumber, bukan biner resmi MySQL." #: libraries/advisory_rules_generic.txt:125-#, fuzzy msgid "" "If you did not compile from source, you may be using a package modified by a " "distribution. The MySQL manual only is accurate for official MySQL binaries, " "not any package distributions (such as RedHat, Debian/Ubuntu etc)." msgstr ""-"Jika Anda tidak mengkompilasi dari source, Anda mungkin menggunakan paket "-"dimodifikasi oleh distribusi. The MySQL manual saja cukup akurat untuk MySQL "-"binari resmi, tidak ada distribusi paket (seperti RedHat, Debian / Ubuntu "+"Jika Anda tidak mengkompilasi dari sumber, Anda mungkin menggunakan paket "+"yang dimodifikasi oleh distribusi. Manual MySQL hanya akurat untuk binari "+"MySQL resmi, bukan distribusi paket apa pun (seperti RedHat, Debian/Ubuntu " "dll)." #: libraries/advisory_rules_generic.txt:126@@ -17418,9 +17408,8 @@ msgstr "'source' ditemukan pada version_comment" #: libraries/advisory_rules_generic.txt:131-#, fuzzy msgid "The MySQL manual only is accurate for official MySQL binaries."-msgstr "The MySQL manual saja cukup akurat untuk MySQL binari resmi."+msgstr "Manual MySQL hanya akurat untuk binari MySQL resmi." #: libraries/advisory_rules_generic.txt:132 msgid ""@@ -17439,35 +17428,31 @@ msgstr "Arsitektur MySQL" #: libraries/advisory_rules_generic.txt:138-#, fuzzy msgid "MySQL is not compiled as a 64-bit package." msgstr "MySQL tidak dikompilasi sebagai paket 64-bit." #: libraries/advisory_rules_generic.txt:139-#, fuzzy msgid "" "Your memory capacity is above 3 GiB (assuming the Server is on localhost), " "so MySQL might not be able to access all of your memory. You might want to " "consider installing the 64-bit version of MySQL." msgstr ""-"Kapasitas memori Anda di atas 3 GiB (dengan asumsi Server adalah pada "-"localhost), sehingga MySQL mungkin tidak dapat mengakses semua memori Anda. "-"Anda mungkin ingin mempertimbangkan untuk menginstal versi 64-bit dari MySQL."+"Kapasitas memori Anda di atas 3 GiB (dengan asumsi Server berada di "+"localhost), jadi MySQL mungkin tidak dapat mengakses semua memori Anda. Anda "+"mungkin ingin mempertimbangkan untuk menginstal MySQL versi 64-bit." #: libraries/advisory_rules_generic.txt:140-#, fuzzy, php-format+#, php-format msgid "Available memory on this host: %s"-msgstr "Tersedia memori pada host ini: %s"+msgstr "Memori yang tersedia pada host ini: %s" #: libraries/advisory_rules_generic.txt:145 msgid "Query caching method" msgstr "Metode penyinggahan kueri" #: libraries/advisory_rules_generic.txt:148-#, fuzzy-#| msgid "Query caching method" msgid "Suboptimal caching method."-msgstr "Metode penyinggahan kueri"+msgstr "Metode caching suboptimal." #: libraries/advisory_rules_generic.txt:149 #, fuzzy@@ -17483,13 +17468,13 @@ "cache MySQL Query, terutama jika Anda memiliki beberapa budak." #: libraries/advisory_rules_generic.txt:150-#, fuzzy, php-format+#, php-format msgid "" "The query cache is enabled and the server receives %d queries per second. " "This rule fires if there is more than 100 queries per second." msgstr ""-"The cache query diaktifkan dan server menerima %d query per detik. Aturan "-"ini kebakaran jika ada lebih dari 100 permintaan per detik."+"Cache kueri diaktifkan dan server menerima %d kueri per detik. Aturan ini "+"akan menyala jika ada lebih dari 100 kueri per detik." #: libraries/advisory_rules_generic.txt:154 msgid "Percentage of sorts that cause temporary tables"@@ -17502,47 +17487,37 @@ #: libraries/advisory_rules_generic.txt:158 #: libraries/advisory_rules_generic.txt:165-#, fuzzy msgid "" "Consider increasing {sort_buffer_size} and/or {read_rnd_buffer_size}, " "depending on your system memory limits." msgstr ""-"Pertimbangkan untuk meningkatkan {sort_buffer_size} dan / atau "-"{read_rnd_buffer_size}, tergantung pada batas memori sistem Anda"+"Pertimbangkan untuk meningkatkan {sort_buffer_size} dan/atau "+"{read_rnd_buffer_size}, tergantung pada batas memori sistem anda." #: libraries/advisory_rules_generic.txt:159-#, fuzzy, php-format-#| msgid ""-#| "Rate of temporary tables being written to disk: %s, this value should be "-#| "less than 1 per hour"+#, php-format msgid "" "%s%% of all sorts cause temporary tables, this value should be lower than " "10%%." msgstr ""-"Tingkat pembuatan tabel temporer ke diska: %s, nilai ini hasul kurang dari 1 "-"per jam"+"%s%% dari segala macam penyebab tabel sementara, nilai ini harus lebih "+"rendah dari 10%%." #: libraries/advisory_rules_generic.txt:161 msgid "Rate of sorts that cause temporary tables" msgstr "Laju pengurutan yang menyebabkan tabel temporer" #: libraries/advisory_rules_generic.txt:166-#, fuzzy, php-format-#| msgid ""-#| "Rate of temporary tables being written to disk: %s, this value should be "-#| "less than 1 per hour"+#, php-format msgid "" "Temporary tables average: %s, this value should be less than 1 per hour."-msgstr ""-"Tingkat pembuatan tabel temporer ke diska: %s, nilai ini hasul kurang dari 1 "-"per jam"+msgstr "Rata-rata tabel sementara: %s, nilai ini harus kurang dari 1 per jam." #: libraries/advisory_rules_generic.txt:168 msgid "Sort rows" msgstr "Urutkan baris" #: libraries/advisory_rules_generic.txt:171-#, fuzzy msgid "There are lots of rows being sorted." msgstr "Ada banyak baris yang diurutkan."
**Analysis of the provided code diff:** The provided diff shows changes to a translation file (`po/id.po`) for the Indonesian language in phpMyAdmin. This is a localization file containing translated strings and does not contain executable code. **Security Assessment:** Translation files (.po) contain only human-readable strings and formatting instructions for gettext. They do not contain executable code that could introduce security vulnerabilities like SQL injection, XSS, or other code-level security issues. Changes in translation files typically only affect the displayed text in the user interface. **Answer:** ``` Vulnerability Existed: no No security vulnerability - Translation file update - po/id.po (entire file) [Old Code] [Entire old translation file content] [Fixed Code] [Entire new translation file content] ``` **Explanation:** - The diff shows only changes to translated strings and metadata (like translator name and date) - No actual code changes are present that could affect security - Translation files are processed by gettext and don't execute code - This appears to be a routine translation update with no security implications
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- /dev/null+++ cache/phpmyadmin_RELEASE_4_9_11/po/is.po@@ -0,0 +1,16154 @@+# phpMyAdmin translation.+# Copyright (C) 2003 - 2020 phpMyAdmin devel team+# This file is distributed under the same license as the phpMyAdmin package.+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.+#+msgid ""+msgstr ""+"Project-Id-Version: phpMyAdmin 4.9.7-dev\n"+"Report-Msgid-Bugs-To: [email protected]\n"+"POT-Creation-Date: 2020-10-10 13:32-0300\n"+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"+"Last-Translator: Automatically generated\n"+"Language-Team: none\n"+"Language: is\n"+"MIME-Version: 1.0\n"+"Content-Type: text/plain; charset=UTF-8\n"+"Content-Transfer-Encoding: 8bit\n"+"Plural-Forms: nplurals=2; plural=n % 10 != 1 || n % 100 == 11;\n"++#: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095+msgid "Bad type!"+msgstr ""++#: changelog.php:39 license.php:34+#, possible-php-format+msgid ""+"The %s file is not available on this system, please visit %s for more "+"information."+msgstr ""++#: db_central_columns.php:129+msgid "The central list of columns for the current database is empty."+msgstr ""++#: db_central_columns.php:158+msgid "Click to sort."+msgstr ""++#: db_central_columns.php:177+#, possible-php-format+msgid "Showing rows %1$s - %2$s."+msgstr ""++#: db_datadict.php:61 libraries/classes/Operations.php:60+msgid "Database comment"+msgstr ""++#: db_datadict.php:108+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:596+#: templates/table/structure/display_table_stats.twig:6+#: templates/columns_definitions/column_definitions_form.twig:72+msgid "Table comments:"+msgstr ""++#: db_datadict.php:117 libraries/classes/Index.php:723+#: libraries/classes/InsertEdit.php:1913+#: libraries/classes/Navigation/Nodes/NodeColumn.php:30+#: libraries/classes/Plugins/Export/ExportHtmlword.php:291+#: libraries/classes/Plugins/Export/ExportHtmlword.php:387+#: libraries/classes/Plugins/Export/ExportLatex.php:526+#: libraries/classes/Plugins/Export/ExportOdt.php:385+#: libraries/classes/Plugins/Export/ExportOdt.php:487+#: libraries/classes/Plugins/Export/ExportTexytext.php:288+#: libraries/classes/Plugins/Export/ExportTexytext.php:379+#: libraries/classes/Plugins/Export/Helpers/Pdf.php:512+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:629+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:652+#: templates/table/search/table_header.twig:6+#: templates/table/tracking/structure_snapshot_indexes.twig:9+#: templates/table/relation/foreign_key_row.twig:122+#: templates/table/relation/foreign_key_row.twig:132+#: templates/table/relation/internal_relational_row.twig:24+#: templates/table/search/zoom_result_form.twig:34+#: templates/columns_definitions/column_name.twig:16+#: templates/table/tracking/structure_snapshot_columns.twig:6+#: templates/table/index_form.twig:115+#: templates/table/relation/common_form.twig:14+#: templates/table/relation/common_form.twig:19+#: templates/table/relation/common_form.twig:34+#: templates/table/relation/common_form.twig:109+msgid "Column"+msgstr ""++#: db_datadict.php:118 libraries/classes/CentralColumns.php:744+#: libraries/classes/CentralColumns.php:1428 libraries/classes/Index.php:720+#: libraries/classes/InsertEdit.php:307+#: libraries/classes/Plugins/Export/ExportHtmlword.php:294+#: libraries/classes/Plugins/Export/ExportHtmlword.php:390+#: libraries/classes/Plugins/Export/ExportLatex.php:527+#: libraries/classes/Plugins/Export/ExportOdt.php:388+#: libraries/classes/Plugins/Export/ExportOdt.php:490+#: libraries/classes/Plugins/Export/ExportTexytext.php:289+#: libraries/classes/Plugins/Export/ExportTexytext.php:380+#: libraries/classes/Plugins/Export/Helpers/Pdf.php:514+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:630+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:653+#: libraries/classes/Rte/Routines.php:914+#: libraries/classes/Rte/Routines.php:945+#: libraries/classes/Rte/Routines.php:1624 libraries/classes/Rte/RteList.php:90+#: libraries/classes/Rte/RteList.php:118+#: libraries/classes/Server/Privileges.php:2583+#: templates/table/search/table_header.twig:7+#: templates/table/tracking/structure_snapshot_indexes.twig:6+#: templates/database/structure/table_header.twig:32+#: templates/table/structure/table_structure_header.twig:6+#: templates/columns_definitions/table_fields_definitions.twig:12+#: templates/table/tracking/structure_snapshot_columns.twig:7+msgid "Type"+msgstr ""++#: db_datadict.php:119 libraries/classes/CentralColumns.php:755+#: libraries/classes/CentralColumns.php:1429 libraries/classes/Index.php:726+#: libraries/classes/InsertEdit.php:1922+#: libraries/classes/Plugins/Export/ExportHtmlword.php:297+#: libraries/classes/Plugins/Export/ExportHtmlword.php:393+#: libraries/classes/Plugins/Export/ExportLatex.php:528+#: libraries/classes/Plugins/Export/ExportOdt.php:391+#: libraries/classes/Plugins/Export/ExportOdt.php:493+#: libraries/classes/Plugins/Export/ExportTexytext.php:290+#: libraries/classes/Plugins/Export/ExportTexytext.php:381+#: libraries/classes/Plugins/Export/Helpers/Pdf.php:516+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:632+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:655+#: templates/table/tracking/structure_snapshot_indexes.twig:12+#: templates/table/structure/table_structure_header.twig:9+#: templates/columns_definitions/table_fields_definitions.twig:30+#: templates/table/search/zoom_result_form.twig:35+#: templates/table/tracking/structure_snapshot_columns.twig:9+msgid "Null"+msgstr ""++#: db_datadict.php:120 libraries/classes/CentralColumns.php:748+#: libraries/classes/CentralColumns.php:1428+#: libraries/classes/Plugins/Export/ExportHtmlword.php:300+#: libraries/classes/Plugins/Export/ExportHtmlword.php:396+#: libraries/classes/Plugins/Export/ExportLatex.php:529+#: libraries/classes/Plugins/Export/ExportOdt.php:394+#: libraries/classes/Plugins/Export/ExportOdt.php:496+#: libraries/classes/Plugins/Export/ExportTexytext.php:291+#: libraries/classes/Plugins/Export/ExportTexytext.php:382+#: libraries/classes/Plugins/Export/Helpers/Pdf.php:518+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:633+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:656+#: libraries/classes/ReplicationGui.php:165+#: templates/database/structure/body_for_table_summary.twig:54+#: templates/table/structure/table_structure_header.twig:10+#: templates/columns_definitions/table_fields_definitions.twig:20+#: templates/table/tracking/structure_snapshot_columns.twig:10+msgid "Default"+msgstr ""++#: db_datadict.php:122 libraries/classes/Plugins/Export/ExportHtmlword.php:400+#: libraries/classes/Plugins/Export/ExportLatex.php:531+#: libraries/classes/Plugins/Export/ExportOdt.php:500+#: libraries/classes/Plugins/Export/ExportTexytext.php:384+#: libraries/classes/Plugins/Export/Helpers/Pdf.php:527+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:635+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:658+msgid "Links to"+msgstr ""++#: db_datadict.php:124 libraries/classes/Config/Descriptions.php:302+#: libraries/classes/Config/Descriptions.php:332+#: libraries/classes/Config/Descriptions.php:393+#: libraries/classes/Plugins/Export/ExportHtmlword.php:405+#: libraries/classes/Plugins/Export/ExportLatex.php:534+#: libraries/classes/Plugins/Export/ExportOdt.php:505+#: libraries/classes/Plugins/Export/ExportTexytext.php:387+#: libraries/classes/Plugins/Export/Helpers/Pdf.php:534+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:646+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:659+#: templates/table/structure/table_structure_header.twig:12+#: templates/columns_definitions/table_fields_definitions.twig:54+msgid "Comments"+msgstr ""++#: db_datadict.php:156+#: libraries/classes/Controllers/Table/TableStructureController.php:1231+#: libraries/classes/Controllers/Table/TableStructureController.php:1236+#: templates/table/structure/display_structure.twig:61+#: templates/columns_definitions/column_indexes.twig:4+#: templates/table/tracking/structure_snapshot_columns.twig:25+#: templates/table/structure/check_all_table_column.twig:33+msgid "Primary"+msgstr ""++#: db_datadict.php:166 js/messages.php:384+#: libraries/classes/CentralColumns.php:998+#: libraries/classes/Config/FormDisplayTemplate.php:281+#: libraries/classes/Index.php:568 libraries/classes/Index.php:596+#: libraries/classes/IndexColumn.php:141 libraries/classes/MultSubmits.php:514+#: libraries/classes/Plugins/Export/ExportHtmlword.php:657+#: libraries/classes/Plugins/Export/ExportLatex.php:603+#: libraries/classes/Plugins/Export/ExportOdt.php:799+#: libraries/classes/Plugins/Export/ExportTexytext.php:612+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:705+#: libraries/classes/Server/Privileges.php:2759+#: libraries/classes/Server/Privileges.php:2996+#: libraries/classes/Server/Privileges.php:3016+#: libraries/classes/Server/Privileges.php:3680+#: libraries/classes/Server/Privileges.php:3709 prefs_manage.php:145+#: templates/table/tracking/structure_snapshot_indexes.twig:23+#: templates/table/tracking/structure_snapshot_indexes.twig:24+#: templates/table/tracking/structure_snapshot_columns.twig:33+#: templates/privileges/privileges_summary_row.twig:4+#: templates/privileges/privileges_summary_row.twig:7+#: templates/privileges/privileges_summary_row.twig:9+#: templates/table/structure/table_structure_row.twig:25+#: templates/prefs_autoload.twig:12+msgid "No"+msgstr ""++#: db_datadict.php:166 js/messages.php:532+#: libraries/classes/CentralColumns.php:998+#: libraries/classes/Config/FormDisplayTemplate.php:281+#: libraries/classes/Controllers/Server/ServerDatabasesController.php:200+#: libraries/classes/Controllers/Table/TableStructureController.php:799+#: libraries/classes/Controllers/Table/TableStructureController.php:1457+#: libraries/classes/Controllers/Table/TableStructureController.php:1466+#: libraries/classes/Controllers/Table/TableStructureController.php:1471+#: libraries/classes/Controllers/Table/TableStructureController.php:1476+#: libraries/classes/Controllers/Table/TableStructureController.php:1481+#: libraries/classes/Index.php:595 libraries/classes/IndexColumn.php:144+#: libraries/classes/MultSubmits.php:413 libraries/classes/MultSubmits.php:446+#: libraries/classes/MultSubmits.php:475 libraries/classes/MultSubmits.php:512+#: libraries/classes/Plugins/Export/ExportHtmlword.php:658+#: libraries/classes/Plugins/Export/ExportLatex.php:603+#: libraries/classes/Plugins/Export/ExportOdt.php:800+#: libraries/classes/Plugins/Export/ExportTexytext.php:612+#: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:706+#: libraries/classes/Server/Privileges.php:2759+#: libraries/classes/Server/Privileges.php:2993+#: libraries/classes/Server/Privileges.php:3014+#: libraries/classes/Server/Privileges.php:3677+#: libraries/classes/Server/Privileges.php:3709+#: libraries/mult_submits.inc.php:90 libraries/mult_submits.inc.php:219+#: prefs_manage.php:143+#: templates/table/tracking/structure_snapshot_indexes.twig:23+#: templates/table/tracking/structure_snapshot_indexes.twig:24+#: templates/table/tracking/structure_snapshot_columns.twig:33+#: templates/privileges/privileges_summary_row.twig:4+#: templates/privileges/privileges_summary_row.twig:7+#: templates/privileges/privileges_summary_row.twig:9+#: templates/table/structure/table_structure_row.twig:25+#: templates/prefs_autoload.twig:11+msgid "Yes"+msgstr ""++#: db_export.php:48+msgid "View dump (schema) of database"+msgstr ""++#: db_export.php:53 db_tracking.php:105 export.php:390+#: libraries/classes/Controllers/Database/DatabaseStructureController.php:161+#: libraries/classes/Database/Qbe.php:341+#: libraries/classes/Navigation/NavigationTree.php:926+msgid "No tables found in database."+msgstr ""++#: db_export.php:68 libraries/classes/Config/Descriptions.php:490+#: libraries/classes/Controllers/Server/ServerDatabasesController.php:338+#: libraries/classes/Navigation/Nodes/NodeTableContainer.php:25+#: libraries/classes/Navigation/Nodes/NodeTableContainer.php:26+#: libraries/classes/Plugins/Export/ExportXml.php:121+#: libraries/classes/Server/Status/Data.php:128+#: templates/database/structure/show_create.twig:14+msgid "Tables"+msgstr ""++#: db_export.php:69 js/messages.php:757+#: libraries/classes/Config/Forms/User/ExportForm.php:49+#: libraries/classes/Config/Forms/User/ExportForm.php:93+#: libraries/classes/Config/Forms/User/ExportForm.php:120+#: libraries/classes/Import.php:1259 libraries/classes/Menu.php:356+#: libraries/classes/Menu.php:463+#: libraries/classes/Navigation/Nodes/NodeColumn.php:38+#: libraries/classes/Navigation/Nodes/NodeDatabase.php:54+#: libraries/classes/Navigation/Nodes/NodeTable.php:288+#: libraries/classes/Server/Privileges.php:1155 libraries/classes/Util.php:3050+#: libraries/classes/Util.php:3060 libraries/classes/Util.php:3066+#: libraries/classes/Util.php:3346 libraries/classes/Util.php:4004+#: libraries/classes/Util.php:4021 libraries/config.values.php:38+#: libraries/config.values.php:46 libraries/config.values.php:110+#: libraries/config.values.php:116+#: templates/database/central_columns/edit_table_header.twig:2+#: templates/columns_definitions/table_fields_definitions.twig:4+#: templates/table/tracking/structure_snapshot_columns.twig:1+msgid "Structure"+msgstr ""++#: db_export.php:70 libraries/classes/Config/Forms/User/ExportForm.php:62+#: libraries/classes/Config/Forms/User/ExportForm.php:101+#: libraries/classes/Config/Forms/User/ExportForm.php:125+#: libraries/classes/Config/Forms/User/ExportForm.php:131+#: libraries/classes/Controllers/Server/ServerDatabasesController.php:348+#: libraries/classes/Server/Privileges.php:1154+#: templates/table/structure/display_table_stats.twig:17+msgid "Data"+msgstr ""++#: db_export.php:73 libraries/classes/ReplicationGui.php:387+#: templates/database/designer/database_tables.twig:31+#: templates/display/export/select_options.twig:4+#: templates/database/search/selection_form.twig:32+msgid "Select all"+msgstr ""++#: db_operations.php:58 tbl_create.php:27+msgid "The database name is empty!"+msgstr ""++#: db_operations.php:69+msgid "Cannot copy database to the same name. Change the name and try again."+msgstr ""++#: db_operations.php:156+#, possible-php-format+msgid "Database %1$s has been renamed to %2$s."+msgstr ""++#: db_operations.php:168+#, possible-php-format+msgid "Database %1$s has been copied to %2$s."+msgstr ""++#: db_operations.php:297+#, possible-php-format+msgid ""+"The phpMyAdmin configuration storage has been deactivated. %sFind out why%s."+msgstr ""++#: db_qbe.php:133+msgid "You have to choose at least one column to display!"+msgstr ""++#: db_qbe.php:145+#: templates/database/multi_table_query/form.twig:3+msgid "Multi-table query"+msgstr ""++#: db_qbe.php:149+#: templates/database/multi_table_query/form.twig:3+msgid "Query by example"+msgstr ""++#: db_qbe.php:168+#, possible-php-format+msgid "Switch to %svisual builder%s"+msgstr ""++#: db_search.php:32 libraries/classes/Plugins/Auth/AuthenticationConfig.php:84+#: libraries/classes/Plugins/Auth/AuthenticationConfig.php:99+#: libraries/classes/Plugins/Auth/AuthenticationHttp.php:78+#: libraries/classes/Plugins/AuthenticationPlugin.php:174+msgid "Access denied!"+msgstr ""++#: db_tracking.php:55 db_tracking.php:80+msgid "Tracking data deleted successfully."+msgstr ""++#: db_tracking.php:64+#, possible-php-format+msgid ""+"Version %1$s was created for selected tables, tracking is active for them."+msgstr ""++#: db_tracking.php:95+msgid "No tables selected."+msgstr ""++#: db_tracking.php:153+msgid "Database Log"+msgstr ""++#: error_report.php:73+msgid ""+"An error has been detected and an error report has been automatically "+"submitted based on your settings."+msgstr ""++#: error_report.php:77+msgid "Thank you for submitting this report."+msgstr ""++#: error_report.php:81+msgid ""+"An error has been detected and an error report has been generated but failed "+"to be sent."+msgstr ""++#: error_report.php:86+msgid "If you experience any problems please submit a bug report manually."+msgstr ""++#: error_report.php:90+msgid "You may want to refresh the page."+msgstr ""++#: export.php:290+msgid "Bad parameters!"+msgstr ""++#: gis_data_editor.php:122+#, possible-php-format+msgid "Value for the column \"%s\""+msgstr ""++#: gis_data_editor.php:151+#: templates/table/gis_visualization/gis_visualization.twig:38+msgid "Use OpenStreetMaps as Base Layer"+msgstr ""++#. l10n: Spatial Reference System Identifier+#: gis_data_editor.php:173+msgid "SRID:"+msgstr ""++#: gis_data_editor.php:199+#, possible-php-format+msgid "Geometry %d:"+msgstr ""++#: gis_data_editor.php:221+msgid "Point:"+msgstr ""++#: gis_data_editor.php:222 gis_data_editor.php:249 gis_data_editor.php:305+#: gis_data_editor.php:378 js/messages.php:521+msgid "X"+msgstr ""++#: gis_data_editor.php:225 gis_data_editor.php:253 gis_data_editor.php:309+#: gis_data_editor.php:384 js/messages.php:522+msgid "Y"+msgstr ""++#: gis_data_editor.php:247 gis_data_editor.php:303 gis_data_editor.php:376+#: js/messages.php:524+#, possible-php-format+msgid "Point %d"+msgstr ""++#: gis_data_editor.php:260 gis_data_editor.php:316 gis_data_editor.php:394+#: js/messages.php:530+msgid "Add a point"+msgstr ""++#: gis_data_editor.php:277+#, possible-php-format+msgid "Linestring %d:"+msgstr ""++#: gis_data_editor.php:280 gis_data_editor.php:357+msgid "Outer ring:"+msgstr ""++#: gis_data_editor.php:282 gis_data_editor.php:359+#, possible-php-format+msgid "Inner ring %d:"+msgstr ""++#: gis_data_editor.php:319+msgid "Add a linestring"+msgstr ""++#: gis_data_editor.php:320 gis_data_editor.php:399 js/messages.php:531+msgid "Add an inner ring"+msgstr ""++#: gis_data_editor.php:341+#, possible-php-format+msgid "Polygon %d:"+msgstr ""++#: gis_data_editor.php:405+msgid "Add a polygon"+msgstr ""++#: gis_data_editor.php:411+msgid "Add geometry"+msgstr ""++#: gis_data_editor.php:417 js/messages.php:354+#: libraries/classes/BrowseForeigners.php:199+#: libraries/classes/Display/ChangePassword.php:160+#: libraries/classes/Index.php:664 libraries/classes/InsertEdit.php:1891+#: libraries/classes/InsertEdit.php:1929+#: libraries/classes/Normalization.php:216+#: libraries/classes/Normalization.php:898 libraries/classes/Operations.php:67+#: libraries/classes/Operations.php:133 libraries/classes/Operations.php:275+#: libraries/classes/Operations.php:331 libraries/classes/Operations.php:818+#: libraries/classes/Operations.php:888 libraries/classes/Operations.php:933+#: libraries/classes/Operations.php:1343 libraries/classes/Operations.php:1657+#: libraries/classes/Plugins/Auth/AuthenticationCookie.php:209+#: libraries/classes/Plugins/Auth/AuthenticationCookie.php:216+#: libraries/classes/ReplicationGui.php:134+#: libraries/classes/ReplicationGui.php:173+#: libraries/classes/ReplicationGui.php:333+#: libraries/classes/ReplicationGui.php:471+#: libraries/classes/ReplicationGui.php:898+#: libraries/classes/Rte/Events.php:529 libraries/classes/Rte/Routines.php:1085+#: libraries/classes/Rte/Routines.php:1711+#: libraries/classes/Rte/Triggers.php:412+#: libraries/classes/Server/Privileges.php:717+#: libraries/classes/Server/Privileges.php:2232+#: libraries/classes/Server/Privileges.php:3146+#: libraries/classes/Server/UserGroups.php:302+#: libraries/classes/SqlQueryForm.php:374+#: libraries/classes/SqlQueryForm.php:440 libraries/classes/Tracking.php:410+#: libraries/classes/Tracking.php:522 prefs_manage.php:267 prefs_manage.php:351+#: server_privileges.php:323+#: templates/start_and_number_of_rows_panel.twig:14+#: templates/header_location.twig:18+#: templates/privileges/delete_user_fieldset.twig:16+#: templates/table/structure/add_column.twig:23+#: templates/view_create.twig:116+#: templates/database/create_table.twig:21+#: templates/columns_definitions/column_definitions_form.twig:43+#: templates/table/search/selection_form.twig:99+#: templates/privileges/edit_routine_privileges.twig:23+#: templates/display/export/options_format.twig:18+#: templates/display/import/import.twig:191+#: templates/display/results/options_block.twig:114+#: templates/database/search/selection_form.twig:58+#: templates/privileges/privileges_summary.twig:60+#: templates/server/binlog/log_selector.twig:27+#: templates/table/index_form.twig:217+#: view_operations.php:115+msgid "Go"+msgstr ""++#: gis_data_editor.php:420+msgid "Output"+msgstr ""++#: gis_data_editor.php:423+msgid ""+"Choose \"ST_GeomFromText\" from the \"Function\" column and paste the string "+"below into the \"Value\" field."+msgstr ""++#: import.php:73+msgid "Succeeded"+msgstr ""++#: import.php:77 js/messages.php:619+msgid "Failed"+msgstr ""++#: import.php:81+msgid "Incomplete params"+msgstr ""++#: import.php:205+#, possible-php-format+msgid ""+"You probably tried to upload a file that is too large. Please refer to "+"%sdocumentation%s for a workaround for this limit."+msgstr ""++#: import.php:382 import.php:584+msgid "Showing bookmark"+msgstr ""++#: import.php:403 import.php:580+msgid "The bookmark has been deleted."+msgstr ""++#: import.php:497+msgid ""+"No data was received to import. Either no file name was submitted, or the "+"file size exceeded the maximum size permitted by your PHP configuration. See "+"[doc@faq1-16]FAQ 1.16[/doc]."+msgstr ""++#: import.php:547 libraries/classes/Display/Import.php:56+msgid "Could not load import plugins, please check your installation!"+msgstr ""++#: import.php:587 libraries/classes/Sql.php:827 libraries/classes/Sql.php:1631+#, possible-php-format+msgid "Bookmark %s has been created."+msgstr ""++#: import.php:597+#, possible-php-format+msgid "Import has been successfully finished, %d query executed."+msgid_plural "Import has been successfully finished, %d queries executed."+msgstr[0] ""+msgstr[1] ""++#: import.php:628+#, possible-php-format+msgid ""+"Script timeout passed, if you want to finish import, please %sresubmit the "+"same file%s and import will resume."+msgstr ""++#: import.php:638+msgid ""+"However on last run no data has been parsed, this usually means phpMyAdmin "+"won't be able to finish this import unless you increase php time limits."+msgstr ""++#: import.php:706 sql.php:164+msgid "\"DROP DATABASE\" statements are disabled."+msgstr ""++#: import_status.php:108+msgid "Could not load the progress of the import."+msgstr ""++#: import_status.php:117 js/messages.php:461 js/messages.php:627+#: libraries/classes/Export.php:509+#: libraries/classes/Plugins/Schema/ExportRelationSchema.php:303+#: libraries/classes/UserPassword.php:250 libraries/classes/Util.php:665+msgid "Back"+msgstr ""++#: index.php:158+msgid ""+"You were logged out from one server, to logout completely from phpMyAdmin, "+"you need to logout from all servers."+msgstr ""++#: index.php:202 libraries/classes/Footer.php:81+#: libraries/classes/Plugins/Auth/AuthenticationCookie.php:115+msgid "phpMyAdmin Demo Server"+msgstr ""++#: index.php:206 libraries/classes/Plugins/Auth/AuthenticationCookie.php:118+#, possible-php-format+msgid ""+"You are using the demo server. You can do anything here, but please do not "+"change root, debian-sys-maint and pma users. More information is available "+"at %s."+msgstr ""++#: index.php:216+msgid "General settings"+msgstr ""++#: index.php:245 js/messages.php:652+#: libraries/classes/Display/ChangePassword.php:58+#: libraries/classes/Display/ChangePassword.php:61+#: libraries/classes/UserPassword.php:244+msgid "Change password"+msgstr ""++#: index.php:262 libraries/classes/Config/Descriptions.php:1488+msgid "Server connection collation"+msgstr ""++#: index.php:285+msgid "Appearance settings"+msgstr ""++#: index.php:318 prefs_manage.php:276+msgid "More settings"+msgstr ""++#: index.php:340+msgid "Database server"+msgstr ""++#: index.php:343 libraries/classes/Plugins/Auth/AuthenticationCookie.php:165+msgid "Server:"+msgstr ""++#: index.php:347+msgid "Server type:"+msgstr ""++#: index.php:351+msgid "Server connection:"+msgstr ""++#: index.php:355 libraries/classes/Plugins/Export/ExportLatex.php:223+#: libraries/classes/Plugins/Export/ExportSql.php:705+#: libraries/classes/Plugins/Export/ExportXml.php:245+msgid "Server version:"+msgstr ""++#: index.php:361+msgid "Protocol version:"+msgstr ""++#: index.php:365+msgid "User:"+msgstr ""++#: index.php:370+msgid "Server charset:"+msgstr ""++#: index.php:388+msgid "Web server"+msgstr ""++#: index.php:399+msgid "Database client version:"+msgstr ""++#: index.php:403+msgid "PHP extension:"+msgstr ""++#: index.php:417+msgid "PHP version:"+msgstr ""++#: index.php:428+msgid "Show PHP information"+msgstr ""++#: index.php:447+msgid "Version information:"+msgstr ""++#: index.php:456 libraries/classes/Config/FormDisplayTemplate.php:164+#: libraries/classes/Display/Export.php:350+#: libraries/classes/Engines/Pbxt.php:167+#: libraries/classes/Navigation/NavigationHeader.php:207+#: libraries/classes/Sanitize.php:191 libraries/classes/Util.php:314+#: libraries/classes/Util.php:381+#: templates/server/variables/link_template.twig:7+msgid "Documentation"+msgstr ""++#: index.php:465+msgid "Official Homepage"+msgstr ""++#: index.php:472+msgid "Contribute"+msgstr ""++#: index.php:479+msgid "Get support"+msgstr ""++#: index.php:486+msgid "List of changes"+msgstr ""++#: index.php:493+#: templates/server/plugins/section.twig:13+msgid "License"+msgstr ""++#: index.php:513+msgid ""+"The mbstring PHP extension was not found and you seem to be using a "+"multibyte charset. Without the mbstring extension phpMyAdmin is unable to "+"split strings correctly and it may result in unexpected results."+msgstr ""++#: index.php:528+msgid ""+"The curl extension was not found and allow_url_fopen is disabled. Due to "+"this some features such as error reporting or version check are disabled."+msgstr ""++#: index.php:543+msgid ""+"Your PHP parameter [a@https://secure.php.net/manual/en/session.configuration."+"php#ini.session.gc-maxlifetime@_blank]session.gc_maxlifetime[/a] is lower "+"than cookie validity configured in phpMyAdmin, because of this, your login "+"might expire sooner than configured in phpMyAdmin."+msgstr ""++#: index.php:562+msgid ""+"Login cookie store is lower than cookie validity configured in phpMyAdmin, "+"because of this, your login will expire sooner than configured in phpMyAdmin."+msgstr ""++#: index.php:577+msgid "The configuration file now needs a secret passphrase (blowfish_secret)."+msgstr ""++#: index.php:584+msgid "The secret passphrase in configuration (blowfish_secret) is too short."+msgstr ""++#: index.php:598+msgid ""+"Directory [code]config[/code], which is used by the setup script, still "+"exists in your phpMyAdmin directory. It is strongly recommended to remove it "+"once phpMyAdmin has been configured. Otherwise the security of your server "+"may be compromised by unauthorized people downloading your configuration."+msgstr ""++#: index.php:616+#, possible-php-format+msgid ""+"The phpMyAdmin configuration storage is not completely configured, some "+"extended features have been deactivated. %sFind out why%s. "+msgstr ""++#: index.php:623+msgid ""+"Or alternately go to 'Operations' tab of any database to set it up there."+msgstr ""++#: index.php:648+#, possible-php-format+msgid ""+"Server running with Suhosin. Please refer to %sdocumentation%s for possible "+"issues."+msgstr ""++#: index.php:662+#, possible-php-format+msgid ""+"The $cfg['TempDir'] (%s) is not accessible. phpMyAdmin is not able to cache "+"templates and will be slow because of this."+msgstr ""++#: js/messages.php:42+msgid "Confirm"+msgstr ""++#: js/messages.php:43+#, possible-php-format+msgid "Do you really want to execute \"%s\"?"+msgstr ""++#: js/messages.php:45 libraries/classes/MultSubmits.php:498+msgid "You are about to DESTROY a complete database!"+msgstr ""++#: js/messages.php:47+msgid "Cannot rename database to the same name. Change the name and try again"+msgstr ""++#: js/messages.php:49+msgid "You are about to DESTROY a complete table!"+msgstr ""++#: js/messages.php:51+msgid "You are about to TRUNCATE a complete table!"+msgstr ""++#: js/messages.php:52+msgid "Delete tracking data for this table?"+msgstr ""++#: js/messages.php:54+msgid "Delete tracking data for these tables?"+msgstr ""++#: js/messages.php:56+msgid "Delete tracking data for this version?"+msgstr ""++#: js/messages.php:58+msgid "Delete tracking data for these versions?"+msgstr ""++#: js/messages.php:59+msgid "Delete entry from tracking report?"+msgstr ""++#: js/messages.php:60+msgid "Deleting tracking data"+msgstr ""++#: js/messages.php:61+msgid "Dropping Primary Key/Index"+msgstr ""++#: js/messages.php:62+msgid "Dropping Foreign key."+msgstr ""++#: js/messages.php:64+msgid "This operation could take a long time. Proceed anyway?"+msgstr ""++#: js/messages.php:66+#, possible-php-format+msgid "Do you really want to delete user group \"%s\"?"+msgstr ""++#: js/messages.php:68+#, possible-php-format+msgid "Do you really want to delete the search \"%s\"?"+msgstr ""++#: js/messages.php:70+msgid "You have unsaved changes; are you sure you want to leave this page?"+msgstr ""++#: js/messages.php:72+msgid ""+"You are trying to reduce the number of rows, but have already entered data "+"in those rows which will be lost. Do you wish to continue?"+msgstr ""++#: js/messages.php:74+msgid "Do you really want to revoke the selected user(s) ?"+msgstr ""++#: js/messages.php:76+msgid "Do you really want to delete this central column?"+msgstr ""++#: js/messages.php:78+msgid "Do you really want to delete the selected items?"+msgstr ""++#: js/messages.php:80+msgid ""+"Do you really want to DROP the selected partition(s)? This will also DELETE "+"the data related to the selected partition(s)!"+msgstr ""++#: js/messages.php:84+msgid "Do you really want to TRUNCATE the selected partition(s)?"+msgstr ""++#: js/messages.php:86+msgid "Do you really want to remove partitioning?"+msgstr ""++#: js/messages.php:87+msgid "Do you really want to RESET SLAVE?"+msgstr ""++#: js/messages.php:89+msgid ""+"This operation will attempt to convert your data to the new collation. In "+"rare cases, especially where a character doesn't exist in the new collation, "+"this process could cause the data to appear incorrectly under the new "+"collation; in this case we suggest you revert to the original collation and "+"refer to the tips at "+msgstr ""++#: js/messages.php:95+msgid "Garbled Data"+msgstr ""++#: js/messages.php:97+msgid "Are you sure you wish to change the collation and convert the data?"+msgstr ""++#: js/messages.php:99+msgid ""+"Through this operation, MySQL attempts to map the data values between "+"collations. If the character sets are incompatible, there may be data loss "+"and this lost data may <b>NOT</b> be recoverable simply by changing back the "+"column collation(s). <b>To convert existing data, it is suggested to use the "+"column(s) editing feature (the \"Change\" Link) on the table structure page. "+"</b>"+msgstr ""++#: js/messages.php:108+msgid ""+"Are you sure you wish to change all the column collations and convert the "+"data?"+msgstr ""++#: js/messages.php:112+msgid "Save & close"+msgstr ""++#: js/messages.php:113 libraries/classes/InsertEdit.php:1895+#: prefs_manage.php:357 prefs_manage.php:368+#: templates/config/form_display/fieldset_bottom.twig:9+msgid "Reset"+msgstr ""++#: js/messages.php:114+msgid "Reset all"+msgstr ""++#: js/messages.php:117+msgid "Missing value in the form!"+msgstr ""++#: js/messages.php:118+msgid "Select at least one of the options!"+msgstr ""++#: js/messages.php:119+msgid "Please enter a valid number!"+msgstr ""++#: js/messages.php:120+msgid "Please enter a valid length!"+msgstr ""++#: js/messages.php:121+msgid "Add index"+msgstr ""
Based on the provided code diff, I cannot identify any security vulnerabilities. Here's my analysis: ``` Vulnerability Existed: no No security vulnerability identified - po/is.po - Entire file [Old Code] File did not exist [Fixed Code] New translation file added (Icelandic language pack) ``` **Explanation:** - This diff shows the addition of a new translation file (`is.po`) for Icelandic language support - Translation files (`.po` files) contain only localized text strings and do not contain executable code - The content consists entirely of translation mappings between message IDs and Icelandic translations - No actual PHP code, configuration changes, or security-related modifications are present - This appears to be a routine addition of language support rather than a security fix The file addition follows standard gettext translation file format and contains no security-sensitive changes that would indicate a vulnerability was being addressed.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/it.po 2025-10-27 16:59:44.613384529 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/it.po 2025-10-27 16:59:48.279618188 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-06-11 10:32+0000\n"-"Last-Translator: Leonardo Pantani <[email protected]>\n"+"PO-Revision-Date: 2023-01-07 14:25+0000\n"+"Last-Translator: Marco Marchiò <[email protected]>\n" "Language-Team: Italian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "it/>\n" "Language: it\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.7-dev\n"+"X-Generator: Weblate 4.15.1-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -660,8 +660,8 @@ "at %s." msgstr "" "Stai utilizzando il server dimostrativo. Puoi fare qualsiasi cosa, ma per "-"favore non cambiare gli utenti root, debian-sys-maint e pma.\n"-"Maggiori informazioni sono disponibili su %s."+"favore non cambiare gli utenti root, debian-sys-maint e pma. Maggiori "+"informazioni sono disponibili su %s." #: index.php:216 msgid "General settings"@@ -2821,7 +2821,7 @@ #: js/messages.php:806 msgid "September"-msgstr "Setttembre"+msgstr "Settembre" #: js/messages.php:807 msgid "October"@@ -3590,12 +3590,9 @@ msgstr "accent-sensitive" #: libraries/classes/Charsets.php:679-#, fuzzy-#| msgctxt "Collation variant"-#| msgid "accent-sensitive" msgctxt "Collation variant" msgid "kana-sensitive"-msgstr "accent-sensitive"+msgstr "kana-sensitive" #: libraries/classes/Charsets.php:683 msgctxt "Collation variant"@@ -6817,7 +6814,7 @@ #: libraries/classes/Controllers/Table/TableChartController.php:160 msgid "No numeric columns present in the table to plot." msgstr ""-"Nella tabella non sono presenti campi numerici da visualizzare graficamente."+"Nella tabella non sono presenti campi numerici da visualizzare graficamente." #: libraries/classes/Controllers/Table/TableChartController.php:228 msgid "No data to display"@@ -6995,18 +6992,14 @@ "installazione!" #: libraries/classes/Database/Designer/Common.php:518-#, fuzzy-#| msgid ""-#| "The configuration storage is not ready for the central list of columns "-#| "feature." msgctxt "" "phpMyAdmin configuration storage is not configured for \"Display Features\" " "on designer when user tries to set a display field." msgid "" "phpMyAdmin configuration storage is not configured for \"Display Features\"." msgstr ""-"Il salvataggio della configurazione non è pronto per la funzionalità della "-"lista centrale dei campi."+"La configurazione di phpMyAdmin non consente di impostare un campo di "+"visualizzazione (Display Features)." #: libraries/classes/Database/Designer/Common.php:565 msgid "Error: relationship already exists."@@ -8878,14 +8871,14 @@ "In order to put the original table '%1$s' into Second normal form we need to " "create the following tables:" msgstr ""-"Per poter mettere la tabella originale '%1$s' nella Seconda forma "+"Per poter mettere la tabella originale '%1$s' nella Seconda forma " "normalizzata dobbiamo creare le tabelle seguenti:" #: libraries/classes/Normalization.php:505 #, php-format msgid "The second step of normalization is complete for table '%1$s'." msgstr ""-"Il secondo passaggio di normalizzazione per la tabella '%1$s' è completo."+"Il secondo passaggio di normalizzazione per la tabella '%1$s' è completo." #: libraries/classes/Normalization.php:545 #: libraries/classes/Normalization.php:695@@ -8899,8 +8892,8 @@ "In order to put the original table '%1$s' into Third normal form we need to " "create the following tables:" msgstr ""-"Per poter mettere la tabella originale '%1$s' nella Terza forma "-"normalizzata dobbiamo creare le tabelle seguenti:"+"Per poter mettere la tabella originale '%1$s' nella Terza forma normalizzata "+"dobbiamo creare le tabelle seguenti:" #: libraries/classes/Normalization.php:639 msgid "The third step of normalization is complete."@@ -9590,7 +9583,8 @@ #: libraries/classes/Plugins/Export/ExportSql.php:111 msgid "Additional custom header comment (\\n splits lines):" msgstr ""-"Aggiunge un commento personalizzato al header (\\n per tornare a capo):"+"Aggiunge un commento personalizzato al header (\\n"+" per tornare a capo):" #: libraries/classes/Plugins/Export/ExportSql.php:117 msgid ""@@ -9956,8 +9950,7 @@ #: libraries/classes/Plugins/Import/ImportShp.php:161 #, php-format msgid "There was an error importing the ESRI shape file: \"%s\"."-msgstr ""-"C'è stato un errore durante l'importazione del file shape ESRI: \"%s\"."+msgstr "C'è stato un errore durante l'importazione del file shape ESRI: \"%s\"." #: libraries/classes/Plugins/Import/ImportShp.php:191 #, php-format@@ -10123,18 +10116,6 @@ "seconda opzione, dovete avere la prima opzione settata ad una stringa vuota." #: libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php:28-#, fuzzy-#| msgid ""-#| "LINUX ONLY: Launches an external application and feeds it the column data "-#| "via standard input. Returns the standard output of the application. The "-#| "default is Tidy, to pretty-print HTML code. For security reasons, you "-#| "have to manually edit the file libraries/classes/Plugins/Transformations/"-#| "Output/Text_Plain_External.php and list the tools you want to make "-#| "available. The first option is then the number of the program you want to "-#| "use and the second option is the parameters for the program. The third "-#| "option, if set to 1, will convert the output using htmlspecialchars() "-#| "(Default 1). The fourth option, if set to 1, will prevent wrapping and "-#| "ensure that the output appears all on one line (Default 1)." msgid "" "LINUX ONLY: Launches an external application and feeds it the column data " "via standard input. Returns the standard output of the application. The "@@ -10151,13 +10132,14 @@ "via standard input. Restituisce lo standard output dell'applicazione. " "L'impostazione predefinita è Tidy, per stampare in maniera corretta il " "codice HTML. Per motivi di sicurezza, dovete editare manualmente il file "-"libraries/classes/Plugins/Transformations/Output/Text_Plain_External.php e "-"inserire gli strumenti che volete rendere disponibili. La prima opzione è il "-"numero del programma che volete utilizzare e la seconda sono i parametri per "-"il programma. La terza opzione, se impostata a 1, convertirà l'output "-"utilizzando htmlspecialchars() (Default 1). La quarta opzione, se impostata "-"a 1, inserirà un NOWRAP al contenuto della cella così che l'intero output "-"sarà mostrato sulla stessa riga (Default 1)."+"libraries/classes/Plugins/Transformations/Abs/"+"ExternalTransformationsPlugin.php e inserire gli strumenti che volete "+"rendere disponibili. La prima opzione è il numero del programma che volete "+"utilizzare. La seconda opzione dovrebbe essere blank per ragioni storiche. "+"La terza opzione, se impostata a 1, convertirà l'output utilizzando "+"htmlspecialchars() (Default 1). La quarta opzione, se impostata a 1, "+"inserirà un NOWRAP al contenuto della cella così che l'intero output sarà "+"mostrato sulla stessa riga (Default 1)." #: libraries/classes/Plugins/Transformations/Abs/ExternalTransformationsPlugin.php:114 #, php-format@@ -10168,7 +10150,7 @@ msgstr "" "Stai utilizzando un campo opzione da linea di comando di trasformazione " "esterna, che è stato deprecato per ragioni di sicurezza. Imposta tutte le "-"opzioni linea di comando direttamente alla definizione in %s."+"opzioni a linea di comando direttamente alla definizione in %s." #: libraries/classes/Plugins/Transformations/Abs/FormattedTransformationsPlugin.php:28 msgid ""@@ -13119,9 +13101,9 @@ "tables or use replication." msgstr "" "Numero di volte in cui un blocco tabella (table lock) non poteva essere "-"eseguito immediatamente ed è stato necessario un ciclo di attesa. Se questo "+"eseguito immediatamente ed è stato necessario un ciclo di attesa. Se questo " "valore è alto, e hai problemi di performance, dovresti per prima cosa "-"ottimizzare le tue query, poi suddividere la tua o le tue tabelle, oppure "+"ottimizzare le tue query, poi suddividere la tua o le tue tabelle, oppure " "utilizzare la replicazione." #: libraries/classes/Server/Status/Variables.php:754@@ -14582,10 +14564,8 @@ #. l10n: In case a SQL query did not pass a security check #: tbl_get_field.php:46 transformation_wrapper.php:69-#, fuzzy-#| msgid "There are too many joins without indexes." msgid "There is an issue with your request."-msgstr "Ci sono troppe join prive di indici."+msgstr "C'è un problema con la tua richiesta." #: tbl_replace.php:258 #, php-format@@ -16515,7 +16495,7 @@ #: templates/table/relation/common_form.twig:6 msgid "Foreign key constraints"-msgstr "Vincoli della foreign key"+msgstr "Vincoli di chiave esterna" #: templates/table/relation/common_form.twig:10 msgid "Actions"@@ -16544,7 +16524,7 @@ #: templates/table/relation/common_form.twig:24 msgid "Foreign key constraint"-msgstr "Vincolo della chiave esterna"+msgstr "Vincolo di chiave esterna" #: templates/table/relation/common_form.twig:89 msgid "+ Add constraint"@@ -16731,7 +16711,7 @@ #: libraries/advisory_rules_generic.txt:89 msgid "log_slow_queries is set to 'OFF'"-msgstr "log_slow_queries è impostato a 'OFF'"+msgstr "log_slow_queries è impostato a 'OFF'" #: libraries/advisory_rules_generic.txt:95 msgid ""@@ -16744,7 +16724,7 @@ #: libraries/advisory_rules_generic.txt:96 msgid "slow_query_log is set to 'OFF'"-msgstr "slow_query_log è impostato a 'OFF'"+msgstr "slow_query_log è impostato a 'OFF'" #: libraries/advisory_rules_generic.txt:100 msgid "Release Series"@@ -17877,7 +17857,7 @@ #: libraries/advisory_rules_mysql_before80003.txt:50 #, php-format msgid "Current query cache size: %s"-msgstr "La dimensione attuale della cache delle delle query è: %s"+msgstr "La dimensione attuale della cache delle query è: %s" #: libraries/advisory_rules_mysql_before80003.txt:52 msgid "Query cache min result size"
Vulnerability Existed: no No specific CWE - N/A - po/it.po N/A [Old Code] [Fixed Code] Explanation: The provided diff shows changes to a translation file (po/it.po) for Italian language strings. These changes are purely linguistic corrections and updates to translation metadata (dates, translator names, etc.). There are no code changes that could introduce or fix security vulnerabilities. Translation files contain only human-readable strings and do not affect the application's security posture.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ja.po 2025-10-27 16:59:44.614384593 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ja.po 2025-10-27 16:59:48.279618188 +0000@@ -4,7 +4,7 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-12-12 20:03+0000\n"+"PO-Revision-Date: 2022-11-27 12:48+0000\n" "Last-Translator: Masahiro Fujimoto <[email protected]>\n" "Language-Team: Japanese <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "ja/>\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 4.10-dev\n"+"X-Generator: Weblate 4.15-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -127,7 +127,7 @@ #: templates/table/search/zoom_result_form.twig:35 #: templates/table/tracking/structure_snapshot_columns.twig:9 msgid "Null"-msgstr "NULL"+msgstr "Null" #: db_datadict.php:120 libraries/classes/CentralColumns.php:748 #: libraries/classes/CentralColumns.php:1428
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation updates and metadata changes. **Analysis:** 1. **File:** `po/ja.po` - This is a translation file containing Japanese language strings for phpMyAdmin 2. **Changes Made:** - Updated PO-Revision-Date from 2021-12-12 to 2022-11-27 - Updated X-Generator version from Weblate 4.10-dev to 4.15-dev - Changed the Japanese translation of "Null" from "NULL" to "Null" These changes are typical for translation file updates and don't involve any security-sensitive code modifications. Translation files contain only user-facing text strings and don't execute code. Vulnerability Existed: no No security vulnerabilities identified in this translation file update
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ka.po 2025-10-27 16:59:44.614384593 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ka.po 2025-10-27 16:59:48.279618188 +0000@@ -4,16 +4,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-04-27 16:55+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"-"Language-Team: Georgian <https://hosted.weblate.org/projects/phpmyadmin/4-8/"+"PO-Revision-Date: 2022-04-02 14:06+0000\n"+"Last-Translator: Malkhazi Dartsmelidze <[email protected]>\n"+"Language-Team: Georgian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "ka/>\n" "Language: ka\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 3.6.1\n"+"X-Generator: Weblate 4.12-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -159,7 +159,7 @@ #: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:635 #: libraries/classes/Plugins/Schema/Pdf/PdfRelationSchema.php:658 msgid "Links to"-msgstr ""+msgstr "მიბმულია" #: db_datadict.php:124 libraries/classes/Config/Descriptions.php:302 #: libraries/classes/Config/Descriptions.php:332@@ -436,27 +436,27 @@ #: gis_data_editor.php:199 #, php-format msgid "Geometry %d:"-msgstr ""+msgstr "გეომეტრია %d:" #: gis_data_editor.php:221 msgid "Point:"-msgstr ""+msgstr "წერტილი:" #: gis_data_editor.php:222 gis_data_editor.php:249 gis_data_editor.php:305 #: gis_data_editor.php:378 js/messages.php:521 msgid "X"-msgstr ""+msgstr "X" #: gis_data_editor.php:225 gis_data_editor.php:253 gis_data_editor.php:309 #: gis_data_editor.php:384 js/messages.php:522 msgid "Y"-msgstr ""+msgstr "Y" #: gis_data_editor.php:247 gis_data_editor.php:303 gis_data_editor.php:376 #: js/messages.php:524 #, php-format msgid "Point %d"-msgstr ""+msgstr "წერტილი %d" #: gis_data_editor.php:260 gis_data_editor.php:316 gis_data_editor.php:394 #: js/messages.php:530@@ -471,7 +471,7 @@ #: gis_data_editor.php:280 gis_data_editor.php:357 msgid "Outer ring:"-msgstr ""+msgstr "გარე რკალი:" #: gis_data_editor.php:282 gis_data_editor.php:359 #, php-format@@ -489,7 +489,7 @@ #: gis_data_editor.php:341 #, php-format msgid "Polygon %d:"-msgstr ""+msgstr "მრავალკუთხედი %d:" #: gis_data_editor.php:405 msgid "Add a polygon"@@ -547,7 +547,7 @@ #: gis_data_editor.php:420 msgid "Output"-msgstr ""+msgstr "გამოტანილი" #: gis_data_editor.php:423 msgid ""@@ -556,14 +556,12 @@ msgstr "" #: import.php:73-#, fuzzy-#| msgid "Access denied!" msgid "Succeeded"-msgstr "მიუწვდომელია!"+msgstr "წარმატებულია" #: import.php:77 js/messages.php:619 msgid "Failed"-msgstr ""+msgstr "შეცდომა" #: import.php:81 #, fuzzy@@ -580,7 +578,7 @@ #: import.php:382 import.php:584 msgid "Showing bookmark"-msgstr ""+msgstr "სანიშნის ჩვენება" #: import.php:403 import.php:580 msgid "The bookmark has been deleted."@@ -726,10 +724,8 @@ msgstr "ოქმის ვერსია" #: index.php:365-#, fuzzy-#| msgid "User" msgid "User:"-msgstr "მომხმარებელი"+msgstr "მომხმარებელი:" #: index.php:370 #, fuzzy@@ -784,10 +780,8 @@ msgstr "ოფიციალური ვებგვერდი" #: index.php:472-#, fuzzy-#| msgid "Attributes" msgid "Contribute"-msgstr "ატრიბუტები"+msgstr "შემოგვწირეთ" #: index.php:479 #, fuzzy@@ -802,7 +796,7 @@ #: index.php:493 templates/server/plugins/section.twig:13 msgid "License"-msgstr ""+msgstr "ლიცენზია" #: index.php:513 msgid ""@@ -904,7 +898,7 @@ #: js/messages.php:42 msgid "Confirm"-msgstr ""+msgstr "დადასტურება" #: js/messages.php:43 #, fuzzy, php-format@@ -1164,7 +1158,7 @@ #: templates/table/index_form.twig:216 #: templates/table/relation/common_form.twig:188 msgid "Preview SQL"-msgstr ""+msgstr "SQL-ის გადახედვა" #: js/messages.php:133 #, fuzzy@@ -1224,7 +1218,7 @@ #: js/messages.php:150 js/messages.php:217 libraries/classes/Tracking.php:335 #: libraries/classes/Tracking.php:651 msgid "Close"-msgstr ""+msgstr "დახურვა" #: js/messages.php:153 #, fuzzy@@ -1251,7 +1245,7 @@ #: js/messages.php:159 libraries/classes/Server/Status/Data.php:132 #: libraries/classes/Server/Status/Queries.php:149 msgid "Other"-msgstr ""+msgstr "სხვა" #. l10n: Thousands separator #: js/messages.php:161 libraries/classes/Util.php:1353@@ -1311,15 +1305,15 @@ #: js/messages.php:182 msgid "System memory"-msgstr ""+msgstr "სისტემური მეხსიერება" #: js/messages.php:183 msgid "System swap"-msgstr ""+msgstr "სისტემური Swap-ი" #: js/messages.php:185 msgid "Average load"-msgstr ""+msgstr "საშუალო დატვირთვა" #: js/messages.php:186 #, fuzzy@@ -1329,7 +1323,7 @@ #: js/messages.php:187 msgid "Cached memory"-msgstr ""+msgstr "დაქეშილი მეხსიერება" #: js/messages.php:188 #, fuzzy@@ -1339,11 +1333,11 @@ #: js/messages.php:189 msgid "Free memory"-msgstr ""+msgstr "თავისუფალი მეხსიერება" #: js/messages.php:190 msgid "Used memory"-msgstr ""+msgstr "გამოყენებული მეხსიერება" #: js/messages.php:192 #, fuzzy@@ -1369,7 +1363,7 @@ #: js/messages.php:197 msgid "Bytes sent"-msgstr ""+msgstr "გაგზავნილი ბაიტი" #: js/messages.php:198 #, fuzzy@@ -1431,9 +1425,8 @@ #. l10n: Questions is the name of a MySQL Status variable #: js/messages.php:213-#, fuzzy msgid "Questions"-msgstr "სპარსული"+msgstr "კითხვები" #: js/messages.php:214 libraries/classes/Server/Status.php:151 msgid "Traffic"@@ -1442,10 +1435,8 @@ #: js/messages.php:215 libraries/classes/Menu.php:625 #: libraries/classes/Server/Status/Monitor.php:264 #: libraries/classes/Util.php:3995-#, fuzzy-#| msgid "General relation features" msgid "Settings"-msgstr "General relation features"+msgstr "პარამეტრები" #: js/messages.php:216 #, fuzzy@@ -1473,11 +1464,11 @@ #: js/messages.php:221 msgid "Resume monitor"-msgstr ""+msgstr "თვალყურის დევნების გაგრძელება" #: js/messages.php:222 msgid "Pause monitor"-msgstr ""+msgstr "თვალყურის დევნების შეჩერება" #: js/messages.php:223 libraries/classes/Server/Status/Processes.php:46 msgid "Start auto refresh"@@ -1585,7 +1576,7 @@ #. l10n: As in differential values #: js/messages.php:259 msgid "Differential"-msgstr ""+msgstr "განსხვავება" #: js/messages.php:260 #, php-format@@ -1594,7 +1585,7 @@ #: js/messages.php:261 msgid "Unit"-msgstr ""+msgstr "ერთეული" #: js/messages.php:263 msgid "From slow log"@@ -1658,10 +1649,8 @@ msgstr "" #: js/messages.php:290-#, fuzzy-#| msgid "Analyze" msgid "Analyzing…"-msgstr "Analyze"+msgstr "ანალიზი…" #: js/messages.php:291 #, fuzzy@@ -1702,37 +1691,28 @@ msgstr "Profiling" #: js/messages.php:296-#, fuzzy-#| msgid "Table" msgctxt "Display format" msgid "Table" msgstr "ცხრილი" #: js/messages.php:297-#, fuzzy msgid "Chart"-msgstr "სიმბოლოთა ნაკრებები"+msgstr "გრაფიკი" #: js/messages.php:299 libraries/classes/Display/Export.php:579-#, fuzzy-#| msgid "Database" msgctxt "Alias" msgid "Database" msgstr "მონაცემთა ბაზა" #: js/messages.php:300 libraries/classes/Display/Export.php:591-#, fuzzy-#| msgid "Table" msgctxt "Alias" msgid "Table" msgstr "ცხრილი" #: js/messages.php:301 libraries/classes/Display/Export.php:602-#, fuzzy-#| msgid "Column" msgctxt "Alias" msgid "Column"-msgstr "სვეტები"+msgstr "სვეტი" #. l10n: A collection of available filters #: js/messages.php:304@@ -1743,9 +1723,8 @@ #. l10n: Filter as in "Start Filtering" #: js/messages.php:306-#, fuzzy msgid "Filter"-msgstr "ფაილები"+msgstr "ფილტრი" #: js/messages.php:307 msgid "Filter queries by word/regexp:"@@ -1762,10 +1741,8 @@ msgstr "ჩასმული სტრიქონების რაოდენობა" #: js/messages.php:311-#, fuzzy-#| msgid "Total" msgid "Total:"-msgstr "სულ"+msgstr "სულ:" #: js/messages.php:313 #, fuzzy@@ -1792,7 +1769,7 @@ #: js/messages.php:322 msgid "Affected rows:"-msgstr ""+msgstr "შეცვლილი სტრიქონები:" #: js/messages.php:325 msgid "Failed parsing config file. It doesn't seem to be valid JSON code."@@ -1835,7 +1812,7 @@ #: js/messages.php:340 msgid "Advisor system"-msgstr ""+msgstr "მრჩეველი სისტემა" #: js/messages.php:341 msgid "Possible performance issues"@@ -1900,14 +1877,12 @@ #: js/messages.php:359 templates/config/form_display/fieldset_bottom.twig:8 msgid "Apply"-msgstr ""+msgstr "გადატარება" #: js/messages.php:362 libraries/classes/Navigation/NavigationHeader.php:61 #: libraries/classes/Server/Status/Monitor.php:130-#, fuzzy-#| msgid "Load" msgid "Loading…"-msgstr "ჩატვირთვა"+msgstr "ჩატვირთვა…" #: js/messages.php:363 msgid "Request aborted!!"@@ -2015,8 +1990,6 @@ msgstr "Failed to write file to disk." #: js/messages.php:393-#, fuzzy-#| msgid "Search" msgid "Searching" msgstr "ძებნა" @@ -2033,16 +2006,12 @@ msgstr "SQL Query box" #: js/messages.php:396-#, fuzzy-#| msgid "Browse" msgid "Browsing" msgstr "არჩევა" #: js/messages.php:397-#, fuzzy-#| msgid "Deleting %s" msgid "Deleting"-msgstr "%s-ის წაშლა"+msgstr "წაშლა" #: js/messages.php:398 #, php-format@@ -2077,7 +2046,7 @@ #: js/messages.php:408 libraries/classes/Rte/Routines.php:761 msgid "ENUM/SET editor"-msgstr ""+msgstr "ENUM/SET-ის რედაქტორი" #: js/messages.php:409 #, php-format@@ -2169,7 +2138,7 @@ #: js/messages.php:430 libraries/classes/Normalization.php:967 msgid "Pick"-msgstr ""+msgstr "აირჩიეთ" #: js/messages.php:431 #, fuzzy@@ -2192,7 +2161,7 @@ #: js/messages.php:437 msgid "See more"-msgstr ""+msgstr "მეტის ნახვა" #: js/messages.php:438 msgid "Are you sure?"@@ -2205,10 +2174,8 @@ msgstr "" #: js/messages.php:443-#, fuzzy-#| msgid "Attributes" msgid "Continue"-msgstr "ატრიბუტები"+msgstr "გაგრძელება" #: js/messages.php:446 msgid "Add primary key"@@ -2245,10 +2212,8 @@ #. l10n: Display text for calendar close link #: js/messages.php:453 js/messages.php:782 #: libraries/classes/Normalization.php:340-#, fuzzy-#| msgid "Donate" msgid "Done"-msgstr "შემოწირულობა"+msgstr "დასრულდა." #: js/messages.php:454 msgid "Confirm partial dependencies"@@ -2284,7 +2249,7 @@ #: js/messages.php:469 msgid "Step"-msgstr ""+msgstr "ბიჯი" #: js/messages.php:471 msgid "The following actions will be performed:"@@ -2359,11 +2324,11 @@ #: js/messages.php:490 msgid "Minimum value:"-msgstr ""+msgstr "მინიმალური მნიშვნელობა:" #: js/messages.php:491 msgid "Maximum value:"-msgstr ""+msgstr "მაქსიმალური მნიშვნელობა:" #: js/messages.php:494 #, fuzzy@@ -2430,21 +2395,19 @@ #: js/messages.php:523 msgid "Point"-msgstr ""+msgstr "წერტილი" #: js/messages.php:525-#, fuzzy-#| msgid "Lines terminated by" msgid "Linestring"-msgstr "Lines terminated by"+msgstr "სტრიქონის ხაზი" #: js/messages.php:526 msgid "Polygon"-msgstr ""+msgstr "მრავალკუთხედი" #: js/messages.php:527 templates/display/results/options_block.twig:79 msgid "Geometry"-msgstr ""+msgstr "გეომეტრია" #: js/messages.php:528 #, fuzzy@@ -2464,7 +2427,7 @@ #: js/messages.php:534 msgid "Encryption key"-msgstr ""+msgstr "დაშიფვრის გასაღები" #: js/messages.php:538 msgid ""@@ -2556,7 +2519,7 @@ #: js/messages.php:571 templates/database/designer/side_menu.twig:4 msgid "Untitled"-msgstr ""+msgstr "უსათაურო" #: js/messages.php:572 #, fuzzy@@ -2673,8 +2636,6 @@ msgstr "საწყისი მდებარეობა" #: js/messages.php:617-#, fuzzy-#| msgid "Cancel" msgid "cancel" msgstr "გაუქმება" @@ -2684,7 +2645,7 @@ #: js/messages.php:620 msgid "Success"-msgstr ""+msgstr "წარმატებულია" #: js/messages.php:621 #, fuzzy@@ -2744,10 +2705,8 @@ #: js/messages.php:655 #: templates/table/structure/actions_in_table_structure.twig:4-#, fuzzy-#| msgid "Mon" msgid "More"-msgstr "ორშ"+msgstr "მეტი" #: js/messages.php:658 #, fuzzy@@ -2955,15 +2914,15 @@ #: js/messages.php:746 msgid "Weak"-msgstr ""+msgstr "სუსტი" #: js/messages.php:747 msgid "Good"-msgstr ""+msgstr "კარგი" #: js/messages.php:748 msgid "Strong"-msgstr ""+msgstr "ძლიერი" #: js/messages.php:751 msgid "Timed out waiting for security key activation."@@ -3003,72 +2962,56 @@ #. l10n: Display text for current month link in calendar #: js/messages.php:794-#, fuzzy-#| msgid "Total" msgid "Today"-msgstr "სულ"+msgstr "დღეს" #: js/messages.php:798-#, fuzzy-#| msgid "Binary" msgid "January"-msgstr "ბინარული"+msgstr "იანვარი" #: js/messages.php:799 msgid "February"-msgstr ""+msgstr "თებერვალი" #: js/messages.php:800-#, fuzzy-#| msgid "Mar" msgid "March"-msgstr "მარ"+msgstr "მარტი" #: js/messages.php:801-#, fuzzy-#| msgid "Apr" msgid "April"-msgstr "აპრ"+msgstr "აპრილი" #: js/messages.php:802 msgid "May" msgstr "მაი" #: js/messages.php:803-#, fuzzy-#| msgid "Jun" msgid "June"-msgstr "ივნ"+msgstr "ივნისი" #: js/messages.php:804-#, fuzzy-#| msgid "Jul" msgid "July"-msgstr "ივლ"+msgstr "ივლისი" #: js/messages.php:805-#, fuzzy-#| msgid "Aug" msgid "August"-msgstr "აგვ"+msgstr "აგვისტო" #: js/messages.php:806 msgid "September"-msgstr ""+msgstr "სექტემბერი" #: js/messages.php:807-#, fuzzy-#| msgid "Oct" msgid "October"-msgstr "ოქტ"+msgstr "ოქტომბერი" #: js/messages.php:808 msgid "November"-msgstr ""+msgstr "ნოემბერი" #: js/messages.php:809 msgid "December"-msgstr ""+msgstr "დეკემბერი" #. l10n: Short month name #: js/messages.php:816 libraries/classes/Util.php:1481@@ -3092,11 +3035,9 @@ #. l10n: Short month name #: js/messages.php:824 libraries/classes/Util.php:1489-#, fuzzy-#| msgid "May" msgctxt "Short month name" msgid "May"-msgstr "მაი"+msgstr "მაისი" #. l10n: Short month name #: js/messages.php:826 libraries/classes/Util.php:1491@@ -3134,48 +3075,37 @@ msgstr "დეკ" #: js/messages.php:844-#, fuzzy-#| msgid "Sun" msgid "Sunday"-msgstr "კვი"+msgstr "კვირა" #: js/messages.php:845-#, fuzzy-#| msgid "Mon" msgid "Monday"-msgstr "ორშ"+msgstr "ორშაბათი" #: js/messages.php:846-#, fuzzy-#| msgid "Tue" msgid "Tuesday"-msgstr "სამ"+msgstr "სამშაბათი" #: js/messages.php:847 msgid "Wednesday"-msgstr ""+msgstr "ოთხშაბათი" #: js/messages.php:848 msgid "Thursday"-msgstr ""+msgstr "ხუთშაბათი" #: js/messages.php:849-#, fuzzy-#| msgid "Fri" msgid "Friday"-msgstr "პარ"+msgstr "პარასკევი" #: js/messages.php:850 msgid "Saturday"-msgstr ""+msgstr "შაბათი" #. l10n: Short week day name for Sunday #: js/messages.php:857-#, fuzzy-#| msgctxt "Short week day name"-#| msgid "Sun" msgid "Sun"-msgstr "კვი"+msgstr "კვირა" #. l10n: Short week day name for Monday #: js/messages.php:859 libraries/classes/Util.php:1508@@ -3209,66 +3139,51 @@ #. l10n: Minimal week day name for Sunday #: js/messages.php:876-#, fuzzy-#| msgid "Sun" msgid "Su"-msgstr "კვი"+msgstr "კვ" #. l10n: Minimal week day name for Monday #: js/messages.php:878-#, fuzzy-#| msgid "Mon" msgid "Mo" msgstr "ორშ" #. l10n: Minimal week day name for Tuesday #: js/messages.php:880-#, fuzzy-#| msgid "Tue" msgid "Tu"-msgstr "სამ"+msgstr "სამშ" #. l10n: Minimal week day name for Wednesday #: js/messages.php:882-#, fuzzy-#| msgid "Wed" msgid "We"-msgstr "ოთხ"+msgstr "ოთხშ" #. l10n: Minimal week day name for Thursday #: js/messages.php:884-#, fuzzy-#| msgid "Thu" msgid "Th"-msgstr "ხუთ"+msgstr "ხუთშ" #. l10n: Minimal week day name for Friday #: js/messages.php:886-#, fuzzy-#| msgid "Fri" msgid "Fr" msgstr "პარ" #. l10n: Minimal week day name for Saturday #: js/messages.php:888-#, fuzzy-#| msgid "Sat" msgid "Sa" msgstr "შაბ" #. l10n: Column header for week of the year in calendar #: js/messages.php:892-#, fuzzy-#| msgid "Wiki" msgid "Wk"-msgstr "ვიკი"+msgstr "კვ" #. l10n: Month-year order for calendar, use either "calendar-month-year" #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -3280,19 +3195,15 @@ #: js/messages.php:914 msgid "Hour"-msgstr ""+msgstr "საათი" #: js/messages.php:915-#, fuzzy-#| msgid "in use" msgid "Minute"-msgstr "in use"+msgstr "წუთი" #: js/messages.php:916-#, fuzzy-#| msgid "per second" msgid "Second"-msgstr "წამში"+msgstr "წამი" #: js/messages.php:927 msgid "This field is required"@@ -3472,19 +3383,17 @@ #: libraries/classes/Advisor.php:634 msgid "per day"-msgstr ""+msgstr "დღეში" #: libraries/classes/BrowseForeigners.php:193-#, fuzzy-#| msgid "Search" msgid "Search:"-msgstr "ძებნა"+msgstr "ძებნა:" #: libraries/classes/BrowseForeigners.php:216 #: libraries/classes/BrowseForeigners.php:220 libraries/classes/Index.php:719 #: templates/table/tracking/structure_snapshot_indexes.twig:5 msgid "Keyname"-msgstr ""+msgstr "გასაღებისსახელი" #: libraries/classes/BrowseForeigners.php:217 #: libraries/classes/BrowseForeigners.php:219@@ -3534,11 +3443,11 @@ #: libraries/classes/CentralColumns.php:626 msgid "YES"-msgstr ""+msgstr "დიახ" #: libraries/classes/CentralColumns.php:626 msgid "NO"-msgstr ""+msgstr "არა" #: libraries/classes/CentralColumns.php:734 libraries/classes/Index.php:717 #: libraries/classes/Rte/RteList.php:89 libraries/classes/Rte/RteList.php:104@@ -3579,7 +3488,7 @@ #: libraries/classes/Rte/Routines.php:946 #: templates/columns_definitions/table_fields_definitions.twig:16 msgid "Length/Values"-msgstr ""+msgstr "სიგრძე/მნიშვნელობები" #: libraries/classes/CentralColumns.php:750 #: libraries/classes/CentralColumns.php:1429 libraries/classes/Charsets.php:302@@ -3598,15 +3507,13 @@ msgstr "კოლაცია" #: libraries/classes/CentralColumns.php:753-#, fuzzy-#| msgid "Attributes" msgid "Attribute"-msgstr "ატრიბუტები"+msgstr "ატრიბუტი" #: libraries/classes/CentralColumns.php:757 #: libraries/classes/CentralColumns.php:1429 msgid "A_I"-msgstr ""+msgstr "A_I" #: libraries/classes/CentralColumns.php:793 #, fuzzy@@ -3641,21 +3548,15 @@ msgstr "სიმბოლოთა ნაკრები" #: libraries/classes/Charsets.php:339-#, fuzzy-#| msgid "unknown" msgid "Unknown" msgstr "უცნობი" #: libraries/classes/Charsets.php:353-#, fuzzy-#| msgid "Binary" msgctxt "Collation" msgid "Binary" msgstr "ბინარული" #: libraries/classes/Charsets.php:365 libraries/classes/Charsets.php:604-#, fuzzy-#| msgid "Unicode" msgctxt "Collation" msgid "Unicode" msgstr "უნიკოდი"@@ -3673,8 +3574,6 @@ msgstr "CHAR textarea columns" #: libraries/classes/Charsets.php:387 libraries/classes/Charsets.php:558-#, fuzzy-#| msgid "Russian" msgctxt "Collation" msgid "Russian" msgstr "რუსული"@@ -3694,158 +3593,114 @@ #: libraries/classes/Charsets.php:398 libraries/classes/Charsets.php:474 msgctxt "Collation" msgid "Chinese"-msgstr ""+msgstr "ჩინური" #: libraries/classes/Charsets.php:406 libraries/classes/Charsets.php:522-#, fuzzy-#| msgid "Japanese" msgctxt "Collation" msgid "Japanese" msgstr "იაპონური" #: libraries/classes/Charsets.php:411-#, fuzzy-#| msgid "Baltic" msgctxt "Collation" msgid "Baltic" msgstr "ბალტიური" #: libraries/classes/Charsets.php:416-#, fuzzy-#| msgid "Armenian" msgctxt "Collation" msgid "Armenian" msgstr "სომხური" #: libraries/classes/Charsets.php:419-#, fuzzy-#| msgid "Cyrillic" msgctxt "Collation" msgid "Cyrillic" msgstr "კირილიცა" #: libraries/classes/Charsets.php:422-#, fuzzy-#| msgid "Arabic" msgctxt "Collation" msgid "Arabic" msgstr "არაბული" #: libraries/classes/Charsets.php:425 libraries/classes/Charsets.php:537-#, fuzzy-#| msgid "Korean" msgctxt "Collation" msgid "Korean" msgstr "კორეული" #: libraries/classes/Charsets.php:428-#, fuzzy-#| msgid "Hebrew" msgctxt "Collation" msgid "Hebrew"-msgstr "ებრაული"+msgstr "ივრითი"
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be translation updates for the Georgian language file (ka.po) in phpMyAdmin. **Analysis:** - The diff shows updates to translation strings in a localization file (.po) - Changes include: - Updated metadata (revision date, translator, generator version) - Filled in missing Georgian translations for various UI strings - No code logic changes, only translation text modifications - No security-related code fixes are present Since this is purely a localization file update with no code changes, there are no security vulnerabilities to report. **Answer:** ``` Vulnerability Existed: no No security vulnerabilities found in translation file updates ```
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ko.po 2025-10-27 16:59:44.616384720 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ko.po 2025-10-27 16:59:48.281618315 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2022-02-01 15:55+0000\n"-"Last-Translator: Yonjae Lee <[email protected]>\n"+"PO-Revision-Date: 2022-10-17 00:56+0000\n"+"Last-Translator: s.c. yoo <[email protected]>\n" "Language-Team: Korean <https://hosted.weblate.org/projects/phpmyadmin/4-9/ko/" ">\n" "Language: ko\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 4.11-dev\n"+"X-Generator: Weblate 4.15-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -16216,7 +16216,7 @@ #: templates/table/relation/common_form.twig:6 msgid "Foreign key constraints"-msgstr "외래키 제약"+msgstr "외래 키 제약" #: templates/table/relation/common_form.twig:10 msgid "Actions"@@ -16244,7 +16244,7 @@ #: templates/table/relation/common_form.twig:24 msgid "Foreign key constraint"-msgstr "외래키 제약"+msgstr "외래 키 제약" #: templates/table/relation/common_form.twig:89 msgid "+ Add constraint"@@ -16354,7 +16354,7 @@ #: libraries/advisory_rules_generic.txt:68 #, php-format msgid "The slow query rate should be below 5%%, your value is %s%%."-msgstr ""+msgstr "느린 쿼리의 비율은 5%%이하여야 합니다, 당신의 수치는 %s%%입니다." #: libraries/advisory_rules_generic.txt:70 msgid "Slow query rate"@@ -16476,10 +16476,8 @@ msgstr "버전 5.5.8 미만 (5.5버전의 첫 일반 배포판)." #: libraries/advisory_rules_generic.txt:118-#, fuzzy-#| msgid "You should upgrade, to a stable version of MySQL 5.5" msgid "You should upgrade, to a stable version of MySQL 5.5."-msgstr "MySQL 5.5 안정 버전으로 업그레이드하시는 것을 권장합니다"+msgstr "MySQL 5.5 안정 버전으로 업그레이드 하는 것을 권장합니다." #: libraries/advisory_rules_generic.txt:121 #: libraries/advisory_rules_generic.txt:128@@ -16785,7 +16783,8 @@ msgid "" "%s%% of all temporary tables are being written to disk, this value should be " "below 25%%"-msgstr ""+msgstr "%s%%의 모든 임시 테이블이 디스크에 저장되고 있습니다. 이 수치는 25%%이하여야 "+"합니다" #: libraries/advisory_rules_generic.txt:219 msgid "Temp disk rate"
**Analysis Results:**
1. **Vulnerability Existed:** no
**No vulnerability identified** - N/A - po/ko.po (various lines)
**Old Code:** Various Korean translations
**Fixed Code:** Updated Korean translations
**Explanation:**
The provided diff shows changes to a translation file (`po/ko.po`). These changes are purely linguistic, updating Korean translations and metadata (like revision date and translator name). There are no code changes that could introduce or fix security vulnerabilities. Translation files contain human-readable strings and do not contain executable code that could be exploited.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ky.po 2025-10-27 16:59:44.617384784 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ky.po 2025-10-27 16:59:48.281618315 +0000@@ -8,16 +8,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2017-11-14 08:29+0000\n"-"Last-Translator: Kylychbek Turdakunov <[email protected]>\n"-"Language-Team: Kyrgyz <https://hosted.weblate.org/projects/phpmyadmin/master/"-"ky/>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Kyrgyz <https://hosted.weblate.org/projects/phpmyadmin/4-9/ky/"+">\n" "Language: ky\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 2.18-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2877,8 +2877,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No vulnerabilities found in the provided diff - po/ky.po No old code No fixed code
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/li.po 2025-10-27 16:59:44.617384784 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/li.po 2025-10-27 16:59:48.281618315 +0000@@ -8,16 +8,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2015-12-29 15:36+0000\n"-"Last-Translator: Robin van der Vliet <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Limburgish <https://hosted.weblate.org/projects/phpmyadmin/"-"master/li/>\n"+"4-9/li/>\n" "Language: li\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n"-"Plural-Forms: nplurals=2; plural=(n != 1);\n"-"X-Generator: Weblate 2.5-dev\n"+"Plural-Forms: nplurals=2; plural=n != 1;\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2814,8 +2814,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/li.po Various lines [Old translation metadata and strings] [Updated translation metadata and strings] Vulnerability Existed: no No specific vulnerability - N/A - po/li.po Lines 2814-2819 [Old untranslated string] [Updated translated string with fuzzy marker] Note: This diff shows only translation file updates (metadata changes and translation improvements). There are no code changes that would indicate security vulnerability fixes. The changes are related to translation maintenance, including updated timestamps, translator information, and translation completion.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/lv.po 2025-10-27 16:59:44.618384848 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/lv.po 2025-10-27 16:59:48.282618379 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-10-09 18:34+0000\n"-"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"PO-Revision-Date: 2022-05-10 10:14+0000\n"+"Last-Translator: ytteroy24b4bcffd91b44b4 <[email protected]>\n" "Language-Team: Latvian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "lv/>\n" "Language: lv\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n != 0 ? 1 : 2;\n"-"X-Generator: Weblate 4.3-dev\n"+"X-Generator: Weblate 4.12.1\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3129,8 +3129,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -7145,9 +7146,8 @@ msgstr "Pilni teksti" #: libraries/classes/Controllers/Table/TableStructureController.php:1241-#, fuzzy msgid "Distinct values"-msgstr "Pārlūkot ārējās vērtības"+msgstr "Atšķirīgās vērtības" #: libraries/classes/Core.php:347 #, php-format@@ -14925,10 +14925,8 @@ msgstr "Apraksts" #: templates/start_and_number_of_rows_panel.twig:3-#, fuzzy-#| msgid "Start" msgid "Start row:"-msgstr "S"+msgstr "Sākuma līnija:" #: templates/start_and_number_of_rows_panel.twig:10 #: templates/display/results/additional_fields.twig:6@@ -15945,8 +15943,6 @@ msgstr "" #: templates/table/structure/row_stats_table.twig:2-#, fuzzy-#| msgid "Row Statistics" msgid "Row statistics" msgstr "Rindas statistika" @@ -16397,9 +16393,8 @@ msgstr "Dati" #: templates/table/tracking/report_table.twig:6-#, fuzzy msgid "Username"-msgstr "Lietotājvārds:"+msgstr "Lietotājvārds" #: templates/database/search/results.twig:12 #, fuzzy, php-format@@ -16842,10 +16837,8 @@ #: templates/table/structure/actions_in_table_structure.twig:127 #: templates/table/structure/check_all_table_column.twig:83-#, fuzzy-#| msgid "Remove chart" msgid "Remove from central columns"-msgstr "Noņemt diagrammu"+msgstr "Noņemt no centrālajām kolonnām" #: templates/table/structure/actions_in_table_structure.twig:131 #: templates/table/structure/check_all_table_column.twig:76@@ -17281,11 +17274,13 @@ "You might want to increase {long_query_time} or optimize the queries listed " "in the slow query log" msgstr ""+"Ieteicams palielināt {long_query_time} vai optimizēt lēno vaicājumu žurnālā "+"uzskaitītos vaicājumus" #: libraries/advisory_rules_generic.txt:68 #, php-format msgid "The slow query rate should be below 5%%, your value is %s%%."-msgstr ""+msgstr "Lēno vaicājumu rādītājam jābūt zem 5%%, jūsu vērtība ir %s%%." #: libraries/advisory_rules_generic.txt:70 #, fuzzy@@ -17296,6 +17291,7 @@ msgid "" "There is a high percentage of slow queries compared to the server uptime." msgstr ""+"Salīdzinot ar servera darbības laiku, ir augsts lēnu vaicājumu īpatsvars." #: libraries/advisory_rules_generic.txt:75 #, php-format@@ -17303,6 +17299,8 @@ "You have a slow query rate of %s per hour, you should have less than 1%% per " "hour." msgstr ""+"Jums ir lēns vaicājumu ātrums %s stundā, jums vajadzētu būt mazāk nekā 1%% "+"stundā." #: libraries/advisory_rules_generic.txt:77 #, fuzzy@@ -17314,17 +17312,21 @@ "{long_query_time} is set to 10 seconds or more, thus only slow queries that " "take above 10 seconds are logged." msgstr ""+"{long_query_time} ir iestatīts uz 10 sekundēm vai vairāk, tāpēc tiek "+"reģistrēti tikai lēni pieprasījumi, kas aizņem vairāk nekā 10 sekundes." #: libraries/advisory_rules_generic.txt:81 msgid "" "It is suggested to set {long_query_time} to a lower value, depending on your " "environment. Usually a value of 1-5 seconds is suggested." msgstr ""+"Ieteicams iestatīt {long_query_time} uz mazāku vērtību atkarībā no jūsu "+"vides. Parasti tiek ieteikta vērtība 1-5 sekundes." #: libraries/advisory_rules_generic.txt:82 #, php-format msgid "long_query_time is currently set to %ds."-msgstr ""+msgstr "long_query_time pašlaik ir iestatīts uz %ds." #: libraries/advisory_rules_generic.txt:84 #: libraries/advisory_rules_generic.txt:91@@ -17344,43 +17346,47 @@ "Enable slow query logging by setting {log_slow_queries} to 'ON'. This will " "help troubleshooting badly performing queries." msgstr ""+"Ieslēdziet lēno vaicājumu reģistrēšanu, iestatot {log_slow_queries} uz 'ON'. "+"Tas palīdzēs novērst problēmas ar slikti strādājošiem vaicājumiem." #: libraries/advisory_rules_generic.txt:89 msgid "log_slow_queries is set to 'OFF'"-msgstr ""+msgstr "log_slow_queries ir iestatīts uz 'OFF'" #: libraries/advisory_rules_generic.txt:95 msgid "" "Enable slow query logging by setting {slow_query_log} to 'ON'. This will " "help troubleshooting badly performing queries." msgstr ""+"Ieslēdziet lēnu vaicājumu reģistrēšanu, iestatot {slow_query_log} uz 'ON'. "+"Tas palīdzēs novērst problēmas ar slikti strādājošiem vaicājumiem." #: libraries/advisory_rules_generic.txt:96 msgid "slow_query_log is set to 'OFF'"-msgstr ""+msgstr "slow_query_log ir iestatīts uz 'OFF'" #: libraries/advisory_rules_generic.txt:100-#, fuzzy-#| msgid "Select Tables" msgid "Release Series"-msgstr "Izvēlieties tabulas"+msgstr "Izlaiduma sērijas" #: libraries/advisory_rules_generic.txt:103 msgid "The MySQL server version less than 5.1."-msgstr ""+msgstr "MySQL servera versija ir mazāka par 5.1." #: libraries/advisory_rules_generic.txt:104 msgid "" "You should upgrade, as MySQL 5.1 has improved performance, and MySQL 5.5 " "even more so." msgstr ""+"Jums vajadzētu veikt jaunināšanu, jo MySQL 5.1 ir uzlabojusies veiktspēja, "+"bet MySQL 5.5 - vēl vairāk." #: libraries/advisory_rules_generic.txt:105 #: libraries/advisory_rules_generic.txt:112 #: libraries/advisory_rules_generic.txt:119-#, fuzzy, php-format+#, php-format msgid "Current version: %s"-msgstr "Tekošā versija"+msgstr "Pašreizējā versija: %s" #: libraries/advisory_rules_generic.txt:107 #: libraries/advisory_rules_generic.txt:114@@ -17390,17 +17396,19 @@ #: libraries/advisory_rules_generic.txt:110 msgid "Version less than 5.1.30 (the first GA release of 5.1)."-msgstr ""+msgstr "Versija, kas ir mazāka par 5.1.30 (5.1 pirmā GA versija)." #: libraries/advisory_rules_generic.txt:111 msgid "" "You should upgrade, as recent versions of MySQL 5.1 have improved " "performance and MySQL 5.5 even more so." msgstr ""+"Jums vajadzētu veikt jaunināšanu, jo jaunākajās MySQL 5.1 versijās ir "+"uzlabota veiktspēja, bet MySQL 5.5 - vēl vairāk." #: libraries/advisory_rules_generic.txt:117 msgid "Version less than 5.5.8 (the first GA release of 5.5)."-msgstr ""+msgstr "Versija, kas ir mazāka par 5.5.8 (5.5 pirmā GA versija)." #: libraries/advisory_rules_generic.txt:118 #, fuzzy@@ -17410,14 +17418,12 @@ #: libraries/advisory_rules_generic.txt:121 #: libraries/advisory_rules_generic.txt:128-#, fuzzy-#| msgid "Description" msgid "Distribution"-msgstr "Apraksts"+msgstr "Izplatīšana" #: libraries/advisory_rules_generic.txt:124 msgid "Version is compiled from source, not a MySQL official binary."-msgstr ""+msgstr "Versija ir kompilēta no pirmkoda, nevis MySQL oficiālā binālā versija." #: libraries/advisory_rules_generic.txt:125 msgid ""@@ -17425,6 +17431,10 @@ "distribution. The MySQL manual only is accurate for official MySQL binaries, " "not any package distributions (such as RedHat, Debian/Ubuntu etc)." msgstr ""+"Ja neesat kompilējis no pirmkoda, iespējams, izmantojat kādu izplatītāja "+"modificētu pakotni. MySQL rokasgrāmata attiecas tikai uz oficiālajām MySQL "+"binārajām datubāzēm, nevis uz jebkurām pakotņu distribūcijām (piemēram, "+"RedHat, Debian/Ubuntu utt.)." #: libraries/advisory_rules_generic.txt:126 msgid "'source' found in version_comment"
Vulnerability Existed: no No specific vulnerability - N/A - po/lv.po (entire file) [Translation file updates - no code changes] [Translation file updates - no code changes] Note: This diff shows only translation updates to the Latvian language file. There are no code changes that would introduce or fix security vulnerabilities. Translation files (.po) contain only localized strings and metadata, not executable code.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/mk.po 2025-10-27 16:59:44.619384911 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/mk.po 2025-10-27 16:59:48.282618379 +0000@@ -4,7 +4,7 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-03-20 09:18+0000\n"+"PO-Revision-Date: 2023-02-01 12:12+0000\n" "Last-Translator: Kristijan Fremen Velkovski <[email protected]>\n" "Language-Team: Macedonian <https://hosted.weblate.org/projects/phpmyadmin/" "4-9/mk/>\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n==1 || n%10==1 ? 0 : 1;\n"-"X-Generator: Weblate 4.5.2-dev\n"+"X-Generator: Weblate 4.16-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -303,7 +303,7 @@ #: templates/display/export/select_options.twig:4 #: templates/database/search/selection_form.twig:32 msgid "Select all"-msgstr "Избери се"+msgstr "Избери сè" #: db_operations.php:58 tbl_create.php:27 msgid "The database name is empty!"@@ -312,50 +312,42 @@ #: db_operations.php:69 msgid "Cannot copy database to the same name. Change the name and try again." msgstr ""+"Не може да се ископира базата на податоци со исто име. Сменете го името и "+"пробајте повторно." #: db_operations.php:156-#, fuzzy, php-format-#| msgid "Database %s has been renamed to %s."+#, php-format msgid "Database %1$s has been renamed to %2$s."-msgstr "Базата на податоци %s е преименувана во %s"+msgstr "Датабазата %1$s беше преименувана во %2$s." #: db_operations.php:168-#, fuzzy, php-format-#| msgid "Database %s has been copied to %s."+#, php-format msgid "Database %1$s has been copied to %2$s."-msgstr "Базата на податоци %s е ископирана во %s"+msgstr "Датабазата %1$s беше копирана во %2$s." #: db_operations.php:297-#, fuzzy, php-format-#| msgid ""-#| " additional features for working with linked tables have been ctivated. "-#| "To find out why click %shere%s."+#, php-format msgid "" "The phpMyAdmin configuration storage has been deactivated. %sFind out why%s." msgstr ""-"Дополнителните можности за работа со поврзаните табели се исклучени. За да "-"дознаете зошто, кликнете %sовде%s."+"Конфигурационото складирање на phpMyAdmin беше исклучено. %sДознајте зошто%s." #: db_qbe.php:133 msgid "You have to choose at least one column to display!" msgstr "Изберете барем една колона за приказ!" #: db_qbe.php:145 templates/database/multi_table_query/form.twig:3-#, fuzzy-#| msgid "in query" msgid "Multi-table query"-msgstr "во упитот"+msgstr "повеќе-табеларно барање" #: db_qbe.php:149 templates/database/multi_table_query/form.twig:3-#, fuzzy msgid "Query by example"-msgstr "Вид на упит"+msgstr "Барање по пример" #: db_qbe.php:168-#, fuzzy, php-format-#| msgid "Switch to copied table"+#, php-format msgid "Switch to %svisual builder%s"-msgstr "Премини на копираната табела"+msgstr "Премини на %sвизуелна изградба%s" #: db_search.php:32 libraries/classes/Plugins/Auth/AuthenticationConfig.php:84 #: libraries/classes/Plugins/Auth/AuthenticationConfig.php:99@@ -375,23 +367,23 @@ msgid "" "Version %1$s was created for selected tables, tracking is active for them." msgstr ""+"Верзија %1$s е креирана за избраните табели, следењето е активирано за нив." #: db_tracking.php:95 msgid "No tables selected." msgstr "Не е избрана ниту една табела." #: db_tracking.php:153-#, fuzzy msgid "Database Log"-msgstr "База на податоци"+msgstr "Журнал на базата на податоци" #: error_report.php:73 msgid "" "An error has been detected and an error report has been automatically " "submitted based on your settings." msgstr ""-"Откриена е грешка и извештајот за грешка е автоматски доставени врз основа "-"на вашите подесувања."+"Пронајдена е грешка и извештајот за грешката е автоматски доставени врз "+"основа на вашите подесувања." #: error_report.php:77 msgid "Thank you for submitting this report."@@ -402,6 +394,8 @@ "An error has been detected and an error report has been generated but failed " "to be sent." msgstr ""+"Пронајдена е грешка и генериран е извештај за грешки, но испраќањето не "+"успеа." #: error_report.php:86 msgid "If you experience any problems please submit a bug report manually."@@ -433,7 +427,7 @@ #: gis_data_editor.php:199 #, php-format msgid "Geometry %d:"-msgstr ""+msgstr "Геометрија %d:" #: gis_data_editor.php:221 msgid "Point:"@@ -461,19 +455,18 @@ msgstr "Додади точка" #: gis_data_editor.php:277-#, fuzzy, php-format-#| msgid "Lines terminated by"+#, php-format msgid "Linestring %d:"-msgstr "Линиите се завршуваат со"+msgstr "Линија текст %d:" #: gis_data_editor.php:280 gis_data_editor.php:357 msgid "Outer ring:"-msgstr ""+msgstr "Надворешен прстен:" #: gis_data_editor.php:282 gis_data_editor.php:359 #, php-format msgid "Inner ring %d:"-msgstr ""+msgstr "Внатрешен прстен %d:" #: gis_data_editor.php:319 #, fuzzy@@ -482,10 +475,8 @@ msgstr "Додади нов корисник" #: gis_data_editor.php:320 gis_data_editor.php:399 js/messages.php:531-#, fuzzy-#| msgid "Add a new User" msgid "Add an inner ring"-msgstr "Додади нов корисник"+msgstr "Додади внатрешен прстен" #: gis_data_editor.php:341 #, php-format@@ -497,9 +488,8 @@ msgstr "Додади полигон" #: gis_data_editor.php:411-#, fuzzy msgid "Add geometry"-msgstr "Додади нов корисник"+msgstr "Додади геометрија" #: gis_data_editor.php:417 js/messages.php:354 #: libraries/classes/BrowseForeigners.php:199@@ -549,7 +539,7 @@ #: gis_data_editor.php:420 msgid "Output"-msgstr ""+msgstr "Излез" #: gis_data_editor.php:423 msgid ""@@ -563,13 +553,11 @@ #: import.php:77 js/messages.php:619 msgid "Failed"-msgstr ""+msgstr "Неуспешно" #: import.php:81-#, fuzzy-#| msgid "Complete inserts" msgid "Incomplete params"-msgstr "Комплетен INSERT (со имиња на полињата)"+msgstr "Непотполни параметри" #: import.php:205 #, php-format@@ -577,10 +565,13 @@ "You probably tried to upload a file that is too large. Please refer to " "%sdocumentation%s for a workaround for this limit." msgstr ""+"Веројатно пробавте да прикачете датотека која е преголема. Ве молиме , "+"погледнете ја %sдокументацијата%s за начин како да ја заобиколете оваа "+"граница." #: import.php:382 import.php:584 msgid "Showing bookmark"-msgstr ""+msgstr "Прикажување белешка" #: import.php:403 import.php:580 msgid "The bookmark has been deleted."@@ -826,16 +817,13 @@ msgstr "" #: index.php:616-#, fuzzy, php-format-#| msgid ""-#| " additional features for working with linked tables have been ctivated. "-#| "To find out why click %shere%s."+#, php-format msgid "" "The phpMyAdmin configuration storage is not completely configured, some " "extended features have been deactivated. %sFind out why%s. " msgstr ""-"Дополнителните можности за работа со поврзаните табели се исклучени. За да "-"дознаете зошто, кликнете %sовде%s."+"Складиштето за конфигурација на phpMyAdmin не е комплетно подесено, некои "+"проширени особини се деактивирани. %sПронајдете зашто%s. " #: index.php:623 msgid ""@@ -886,66 +874,50 @@ msgstr "Со ова ја БРИШЕТЕ комплетната база на податоци!" #: js/messages.php:52-#, fuzzy-#| msgid "Delete tracking data for this table" msgid "Delete tracking data for this table?"-msgstr "Избришете го податоците за тракирање од табелава"+msgstr "Избришете ги податоците за тракирање од оваа табела?" #: js/messages.php:54-#, fuzzy-#| msgid "Delete tracking data for this table" msgid "Delete tracking data for these tables?"-msgstr "Избришете го податоците за тракирање од табелава"+msgstr "Избришете ги податоците за тракирање од овие табели?" #: js/messages.php:56-#, fuzzy-#| msgid "Delete tracking data for this table" msgid "Delete tracking data for this version?"-msgstr "Избришете го податоците за тракирање од табелава"+msgstr "Избришете ги податоците за тракирање за оваа верзија?" #: js/messages.php:58-#, fuzzy-#| msgid "Delete tracking data for this table" msgid "Delete tracking data for these versions?"-msgstr "Избришете го податоците за тракирање од табелава"+msgstr "Избришете ги податоците за тракирање од овие верзии?" #: js/messages.php:59-#, fuzzy-#| msgid "Allows inserting and replacing data." msgid "Delete entry from tracking report?"-msgstr "Дозволува вметнување и замена на података."+msgstr "Избришете запис од извештајот за тракирање?" #: js/messages.php:60-#, fuzzy-#| msgid "Allows inserting and replacing data." msgid "Deleting tracking data"-msgstr "Дозволува вметнување и замена на података."+msgstr "Се бришат податоци за следење" #: js/messages.php:61 msgid "Dropping Primary Key/Index" msgstr "" #: js/messages.php:62-#, fuzzy-#| msgid "Disable foreign key checks" msgid "Dropping Foreign key."-msgstr "Исклучи проверка на надворешни клучеви"+msgstr "Отфрли Странски клуч." #: js/messages.php:64 msgid "This operation could take a long time. Proceed anyway?" msgstr "Оваа операција може да потрае. Да ли да продолжиме?" #: js/messages.php:66-#, fuzzy, php-format-#| msgid "Do you really want to "+#, php-format msgid "Do you really want to delete user group \"%s\"?"-msgstr "Дали навистина сакате да "+msgstr "Дали навистина сакате да ја избришете корисничата група \"%s\"?" #: js/messages.php:68-#, fuzzy, php-format-#| msgid "Do you really want to "+#, php-format msgid "Do you really want to delete the search \"%s\"?"-msgstr "Дали навистина сакате да "+msgstr "Дали навистина сакате да го избришете пребарувањето \"%s\"?" #: js/messages.php:70 msgid "You have unsaved changes; are you sure you want to leave this page?"@@ -958,22 +930,16 @@ msgstr "" #: js/messages.php:74-#, fuzzy-#| msgid "Do you really want to " msgid "Do you really want to revoke the selected user(s) ?"-msgstr "Дали навистина сакате да "+msgstr "Дали навистина сакате да укинете избраниот(ите) корисник(ци) ?" #: js/messages.php:76-#, fuzzy-#| msgid "Do you really want to " msgid "Do you really want to delete this central column?"-msgstr "Дали навистина сакате да "+msgstr "Дали навистина сакате да ја избришете оваа централна колона?" #: js/messages.php:78-#, fuzzy-#| msgid "Do you really want to " msgid "Do you really want to delete the selected items?"-msgstr "Дали навистина сакате да "+msgstr "Дали навистина сакате да ги избришете избраните елеметни?" #: js/messages.php:80 msgid ""@@ -982,16 +948,12 @@ msgstr "" #: js/messages.php:84-#, fuzzy-#| msgid "Do you really want to " msgid "Do you really want to TRUNCATE the selected partition(s)?"-msgstr "Дали навистина сакате да "+msgstr "Дали навистина сакате да ги СКРАТИТЕ избраната(ите) партиција(ии)?" #: js/messages.php:86-#, fuzzy-#| msgid "Do you really want to " msgid "Do you really want to remove partitioning?"-msgstr "Дали навистина сакате да "+msgstr "Дали навистина сакате да ги отстраните партициите?" #: js/messages.php:87 #, fuzzy@@ -1055,10 +1017,8 @@ msgstr "Недостасува вредност во образецот!" #: js/messages.php:118-#, fuzzy-#| msgid "at least one of the words" msgid "Select at least one of the options!"-msgstr "барем еден од зборовите"+msgstr "Изберете барем една од опциите!" #: js/messages.php:119 msgid "Please enter a valid number!"@@ -1099,16 +1059,12 @@ msgstr "Верзија на серверот" #: js/messages.php:126-#, fuzzy-#| msgid "Fields enclosed by" msgid "Composite with:"-msgstr "Полињата се раздвоени со"+msgstr "Kомбиниранo со:" #: js/messages.php:127-#, fuzzy-#| msgid "Add %s field(s)" msgid "Please select column(s) for the index."-msgstr "Додади %s полиња"+msgstr "Молиме одберете колон(а/и) за индексот." #: js/messages.php:130 libraries/classes/InsertEdit.php:1893 #: templates/columns_definitions/column_definitions_form.twig:146@@ -1124,16 +1080,12 @@ msgstr "во упитот" #: js/messages.php:134-#, fuzzy-#| msgid "Latched pages" msgid "Matched rows:"-msgstr "Заглавени страници"+msgstr "Совпаднати редови:" #: js/messages.php:135 libraries/classes/Util.php:566-#, fuzzy-#| msgid "SQL query" msgid "SQL query:"-msgstr "SQL упит"+msgstr "SQL барање:" #. l10n: Default label for the y-Axis of Charts #: js/messages.php:139@@ -1173,12 +1125,11 @@ #: js/messages.php:150 js/messages.php:217 libraries/classes/Tracking.php:335 #: libraries/classes/Tracking.php:651 msgid "Close"-msgstr ""+msgstr "Затвори" #: js/messages.php:153-#, fuzzy msgid "Template was created."-msgstr "Табелата %s е избришана"+msgstr "Шаблонот беше создаден." #: js/messages.php:154 msgid "Template was loaded."@@ -1191,16 +1142,14 @@ msgstr "Профилот е променет." #: js/messages.php:156-#, fuzzy-#| msgid "The row has been deleted." msgid "Template was deleted."-msgstr "Записот е избришан"+msgstr "Шаблонот беше избришан." #. l10n: Other, small valued, queries #: js/messages.php:159 libraries/classes/Server/Status/Data.php:132 #: libraries/classes/Server/Status/Queries.php:149 msgid "Other"-msgstr ""+msgstr "Други" #. l10n: Thousands separator #: js/messages.php:161 libraries/classes/Util.php:1353@@ -1327,9 +1276,8 @@ #: js/messages.php:200 libraries/classes/Server/Status/Data.php:431 #: libraries/classes/Server/Status/Processes.php:128-#, fuzzy msgid "Processes"-msgstr "Листа на процеси"+msgstr "Процеси" #. l10n: shortcuts for Byte #: js/messages.php:203 libraries/classes/Util.php:1264@@ -1369,16 +1317,14 @@ msgstr "EB" #: js/messages.php:210-#, fuzzy, php-format-#| msgid "%s table(s)"+#, php-format msgid "%d table(s)"-msgstr "%s табела"+msgstr "%d табела(и)" #. l10n: Questions is the name of a MySQL Status variable #: js/messages.php:213-#, fuzzy msgid "Questions"-msgstr "Персиски"+msgstr "Прашања" #: js/messages.php:214 libraries/classes/Server/Status.php:151 msgid "Traffic"@@ -1387,10 +1333,8 @@ #: js/messages.php:215 libraries/classes/Menu.php:625 #: libraries/classes/Server/Status/Monitor.php:264 #: libraries/classes/Util.php:3995-#, fuzzy-#| msgid "General relation features" msgid "Settings"-msgstr "Општи особини на релациите"+msgstr "Подесувања" #: js/messages.php:216 msgid "Add chart to grid"@@ -1475,31 +1419,27 @@ #. l10n: %s is FILE or TABLE #: js/messages.php:243-#, fuzzy, php-format-#| msgid "Save as file"+#, php-format msgid "Set log_output to %s"-msgstr "Сочувај како податотека"+msgstr "Подеси log_output во %s" #. l10n: Enable in this context means setting a status variable to ON #: js/messages.php:245-#, fuzzy, php-format-#| msgid "Enabled"+#, php-format msgid "Enable %s"-msgstr "Овозможено"+msgstr "Вклучи %s" #. l10n: Disable in this context means setting a status variable to OFF #: js/messages.php:247-#, fuzzy, php-format-#| msgid "Disable"+#, php-format msgid "Disable %s"-msgstr "Оневозможено"+msgstr "Исклучи %s" #. l10n: %d seconds #: js/messages.php:249-#, fuzzy, php-format-#| msgid "Query took %01.4f sec"+#, php-format msgid "Set long_query_time to %d seconds."-msgstr "време на извршување на упитот %01.4f секунди"+msgstr "Подеси long_query_time на %d секунди." #: js/messages.php:251 msgid ""@@ -1528,7 +1468,7 @@ #. l10n: As in differential values #: js/messages.php:259 msgid "Differential"-msgstr ""+msgstr "Диференцијал" #: js/messages.php:260 #, php-format@@ -1537,7 +1477,7 @@ #: js/messages.php:261 msgid "Unit"-msgstr ""+msgstr "Единица" #: js/messages.php:263 msgid "From slow log"@@ -1601,7 +1541,7 @@ #: js/messages.php:290 msgid "Analyzing…"-msgstr ""+msgstr "Се Анализира…" #: js/messages.php:291 #, fuzzy@@ -1630,10 +1570,8 @@ msgstr "Време" #: js/messages.php:294-#, fuzzy-#| msgid "Total" msgid "Total time:"-msgstr "Вкупно"+msgstr "Вкупно време:" #: js/messages.php:295 #, fuzzy@@ -1642,17 +1580,13 @@ msgstr "SQL резултат" #: js/messages.php:296-#, fuzzy-#| msgid "Table" msgctxt "Display format" msgid "Table" msgstr "Табела" #: js/messages.php:297-#, fuzzy-#| msgid "Charset" msgid "Chart"-msgstr "Кодна страна"+msgstr "Графикон" #: js/messages.php:299 libraries/classes/Display/Export.php:579 #, fuzzy@@ -1685,7 +1619,7 @@ #. l10n: Filter as in "Start Filtering" #: js/messages.php:306 msgid "Filter"-msgstr ""+msgstr "Филтер" #: js/messages.php:307 msgid "Filter queries by word/regexp:"@@ -1696,16 +1630,12 @@ msgstr "" #: js/messages.php:310-#, fuzzy-#| msgid "Number of rows per page" msgid "Sum of grouped rows:"-msgstr "Број на записи на страница"+msgstr "Сума на групирани редови:" #: js/messages.php:311-#, fuzzy-#| msgid "Total" msgid "Total:"-msgstr "Вкупно"+msgstr "Вкупно:" #: js/messages.php:313 #, fuzzy@@ -1749,9 +1679,8 @@ #: libraries/classes/Util.php:3994 libraries/classes/Util.php:4009 #: libraries/classes/Util.php:4026 prefs_manage.php:228 #: templates/display/import/import.twig:38-#, fuzzy msgid "Import"-msgstr "Извоз"+msgstr "Увоз" #: js/messages.php:331 msgid "Import monitor configuration"@@ -1812,10 +1741,8 @@ msgstr "" #: js/messages.php:351-#, fuzzy-#| msgid "Add new field" msgid "No parameters found!"-msgstr "Додади ново поле"+msgstr "Не беа најдени параметрите!" #: js/messages.php:355 templates/database/designer/having_query_panel.twig:118 #: templates/database/designer/rename_to_panel.twig:45@@ -1826,7 +1753,7 @@ #: templates/database/designer/where_query_panel.twig:85 #: templates/database/designer/new_relation_panel.twig:90 msgid "Cancel"-msgstr ""+msgstr "Откажи" #: js/messages.php:358 libraries/classes/Header.php:461 #, fuzzy@@ -1840,9 +1767,8 @@ #: js/messages.php:362 libraries/classes/Navigation/NavigationHeader.php:61 #: libraries/classes/Server/Status/Monitor.php:130-#, fuzzy msgid "Loading…"-msgstr "Локален"+msgstr "Вчитување…" #: js/messages.php:363 msgid "Request aborted!!"@@ -1854,9 +1780,8 @@ msgstr "Листа на процеси" #: js/messages.php:365-#, fuzzy msgid "Request failed!!"-msgstr "Вид на упит"+msgstr "Барањето не успеа!!" #: js/messages.php:366 #, fuzzy@@ -1886,16 +1811,12 @@ msgstr "Не е избрана ни една база на податоци." #: js/messages.php:374-#, fuzzy-#| msgid "No rows selected" msgid "No accounts selected."-msgstr "Нема селектирани записи"+msgstr "Не се одберени акаунти." #: js/messages.php:375-#, fuzzy-#| msgid "Inside table(s):" msgid "Dropping column"-msgstr "во табела(и):"+msgstr "Отстранување на колона" #: js/messages.php:376 #, fuzzy@@ -1946,8 +1867,6 @@ msgstr "" #: js/messages.php:393-#, fuzzy-#| msgid "Search" msgid "Searching" msgstr "Пребарување" @@ -1962,22 +1881,17 @@ msgstr "SQL упит" #: js/messages.php:396-#, fuzzy-#| msgid "Browse" msgid "Browsing"-msgstr "Преглед"+msgstr "Прегледување" #: js/messages.php:397-#, fuzzy-#| msgid "Deleting %s" msgid "Deleting"-msgstr "Бришам %s"+msgstr "Бришење" #: js/messages.php:398-#, fuzzy, php-format-#| msgid "Dumping data for table"+#, php-format msgid "Delete the matches for the %s table?"-msgstr "Приказ на податоци од табелата"+msgstr "Избришете ги совпаѓањата за табелата %s?" #: js/messages.php:402 msgid "The definition of a stored function must contain a RETURN statement!"@@ -2010,10 +1924,9 @@ msgstr "" #: js/messages.php:409-#, fuzzy, php-format-#| msgid "Number of rows per page"+#, php-format msgid "Values for column %s"-msgstr "Број на записи на страница"+msgstr "Вредности за колона %s" #: js/messages.php:410 msgid "Values for a new column"@@ -2024,9 +1937,9 @@ msgstr "" #: js/messages.php:412-#, fuzzy, php-format+#, php-format msgid "Add %d value(s)"-msgstr "Додади нов корисник"+msgstr "Додади %d вредност(и)" #: js/messages.php:416 msgid ""@@ -2090,14 +2003,13 @@ msgstr "" #: js/messages.php:427-#, fuzzy, php-format-#| msgid "Variable"+#, php-format msgid "Variable %d:"-msgstr "Променлива"+msgstr "Варијабила %d:" #: js/messages.php:430 libraries/classes/Normalization.php:967 msgid "Pick"-msgstr ""+msgstr "Избери" #: js/messages.php:431 #, fuzzy@@ -2133,10 +2045,8 @@ msgstr "" #: js/messages.php:443-#, fuzzy-#| msgid "Attributes" msgid "Continue"-msgstr "Атрибути"+msgstr "Продолжи" #: js/messages.php:446 msgid "Add primary key"@@ -2149,10 +2059,8 @@ msgstr "Примарниот клуч %s е додаден." #: js/messages.php:448 libraries/classes/Normalization.php:242-#, fuzzy-#| msgid "Change" msgid "Taking you to next step…"-msgstr "Промени"+msgstr "Кон следниот чекор…" #: js/messages.php:450 #, php-format@@ -2175,10 +2083,8 @@ #. l10n: Display text for calendar close link #: js/messages.php:453 js/messages.php:782 #: libraries/classes/Normalization.php:340-#, fuzzy-#| msgid "None" msgid "Done"-msgstr "нема"+msgstr "Готово" #: js/messages.php:454 msgid "Confirm partial dependencies"@@ -2195,10 +2101,8 @@ msgstr "" #: js/messages.php:460-#, fuzzy-#| msgid "No databases selected." msgid "No partial dependencies selected!"-msgstr "Не е избрана ни една база на податоци."+msgstr "Не беа избрани деловни зависности!" #: js/messages.php:463 msgid "Show me the possible partial dependencies based on data in the table"@@ -2216,7 +2120,7 @@ #: js/messages.php:469 msgid "Step"-msgstr ""+msgstr "Чекор" #: js/messages.php:471 msgid "The following actions will be performed:"@@ -2246,10 +2150,8 @@ msgstr "" #: js/messages.php:479-#, fuzzy-#| msgid "No databases selected." msgid "No dependencies selected!"-msgstr "Не е избрана ни една база на податоци."+msgstr "Не беа избрани зависностите!" #: js/messages.php:482 libraries/classes/CentralColumns.php:1254 #: libraries/classes/InsertEdit.php:1805@@ -2278,16 +2180,12 @@ msgstr "Пребарување" #: js/messages.php:488-#, fuzzy-#| msgid "Column names" msgid "Column maximum:"-msgstr "Имиња на колони"+msgstr "Колона максимум:" #: js/messages.php:489-#, fuzzy-#| msgid "Column names" msgid "Column minimum:"-msgstr "Имиња на колони"+msgstr "Колона минимум:" #: js/messages.php:490 msgid "Minimum value:"@@ -2360,7 +2258,7 @@ #: js/messages.php:523 msgid "Point"-msgstr ""+msgstr "Точка" #: js/messages.php:525 #, fuzzy@@ -2370,7 +2268,7 @@ #: js/messages.php:526 msgid "Polygon"-msgstr ""+msgstr "Полигон" #: js/messages.php:527 templates/display/results/options_block.twig:79 msgid "Geometry"@@ -2445,16 +2343,12 @@ #: js/messages.php:565 templates/database/designer/side_menu.twig:34 #: templates/database/designer/side_menu.twig:37-#, fuzzy-#| msgid "No tables found in database." msgid "Add tables from other databases"-msgstr "Табелите не се пронајдени во базата на податоци."+msgstr "Додади табели од други датабази" #: js/messages.php:566-#, fuzzy-#| msgid "Page number:" msgid "Page name"-msgstr "Број на страници:"+msgstr "Име на страна" #: js/messages.php:567 templates/database/designer/side_menu.twig:57 #: templates/database/designer/side_menu.twig:60@@ -2485,7 +2379,7 @@ #: js/messages.php:571 templates/database/designer/side_menu.twig:4 msgid "Untitled"-msgstr ""+msgstr "Без наслов" #: js/messages.php:572 #, fuzzy@@ -2560,10 +2454,8 @@ msgstr "" #: js/messages.php:599-#, fuzzy-#| msgid "Column names" msgid "Double-click to copy column name."-msgstr "Имиња на колони"+msgstr "Дупло-кликнете за до го копирате името на колоната." #: js/messages.php:601 msgid "Click the drop-down arrow<br />to toggle column's visibility."@@ -2608,7 +2500,7 @@ #: js/messages.php:620 msgid "Success"-msgstr ""+msgstr "Успех" #: js/messages.php:621 #, fuzzy@@ -2641,9 +2533,8 @@ msgstr "" #: js/messages.php:644-#, fuzzy msgid "Go to link:"-msgstr "Базата на податоци не постои"+msgstr "Посети линк:" #: js/messages.php:645 #, fuzzy@@ -2790,25 +2681,21 @@ msgstr "" #: js/messages.php:725-#, fuzzy-#| msgid "Show this query here again" msgid "Execute this query again?"-msgstr "Прикажи го повторно овој упит"+msgstr "Извршите го барањето повторно?" #: js/messages.php:727-#, fuzzy-#| msgid "Do you really want to " msgid "Do you really want to delete this bookmark?"-msgstr "Дали навистина сакате да "+msgstr "Дали навистина сакате да ја избришете ознаката?" #: js/messages.php:729 msgid "Some error occurred while getting SQL debug info." msgstr "" #: js/messages.php:731-#, fuzzy, php-format+#, php-format msgid "%s queries executed %s times in %s seconds."-msgstr "SQL упит"+msgstr "%s барања извршени %s пати во %s секунди." #: js/messages.php:732 #, php-format@@ -2931,7 +2818,7 @@ #: js/messages.php:799 msgid "February"-msgstr ""+msgstr "Февруари" #: js/messages.php:800 #, fuzzy@@ -2969,7 +2856,7 @@ #: js/messages.php:806 msgid "September"-msgstr ""+msgstr "Септември" #: js/messages.php:807 #, fuzzy@@ -3068,11 +2955,11 @@ #: js/messages.php:847 msgid "Wednesday"-msgstr ""+msgstr "Среда" #: js/messages.php:848 msgid "Thursday"-msgstr ""+msgstr "Четврток" #: js/messages.php:849
Based on the provided diff content, I cannot identify any security vulnerabilities. The changes appear to be translation updates and localization improvements for the Macedonian language file. ``` Vulnerability Existed: no No security vulnerabilities identified - N/A - po/mk.po All lines [Old Code] Various Macedonian translation strings [Fixed Code] Updated Macedonian translation strings ``` **Analysis:** The diff shows changes to a localization file (`po/mk.po`) containing Macedonian translations for phpMyAdmin. The modifications include: - Updated translation dates and version information - Improved Macedonian translations for various UI strings - Fixed fuzzy translations and completed incomplete translations - No code logic changes, only string content modifications Since this is purely a translation/localization file update with no code execution changes, there are no security vulnerabilities being addressed in this diff. The changes are focused on improving user experience for Macedonian-speaking users by providing more accurate translations.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ml.po 2025-10-27 16:59:44.619384911 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ml.po 2025-10-27 16:59:48.282618379 +0000@@ -6,8 +6,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-11-18 22:41+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Malayalam <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "ml/>\n" "Language: ml\n"@@ -15,7 +15,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 3.10-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2890,8 +2890,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided code diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates rather than security fixes. ``` Vulnerability Existed: no No vulnerabilities found - N/A - po/ml.po N/A [Old Code] [Fixed Code] ``` **Analysis:** The diff shows changes to a translation file (po/ml.po) which include: 1. Updated revision date and translator information 2. Updated generator version (Weblate 3.10-dev to 4.11-dev) 3. Added a fuzzy flag and filled in a previously empty translation string for "calendar-month-year" These are typical maintenance updates for internationalization files and don't represent security fixes. Translation files contain user-facing strings and don't typically harbor security vulnerabilities unless they contain executable code, which this file does not.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/mn.po 2025-10-27 16:59:44.619384911 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/mn.po 2025-10-27 16:59:48.283618443 +0000@@ -4,16 +4,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-04-27 16:56+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"-"Language-Team: Mongolian <https://hosted.weblate.org/projects/phpmyadmin/4-8/"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Mongolian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "mn/>\n" "Language: mn\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 3.6.1\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3260,8 +3260,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
**Analysis of the provided code diff:**
The provided diff shows changes to a translation file (`po/mn.po`). This file contains localized strings for the Mongolian language version of phpMyAdmin.
**Security Assessment:**
Translation files (`.po` files) typically contain user interface strings and do not contain executable code. Changes in these files are generally related to:
- Updating translation strings
- Modifying metadata (like translator information, dates)
- Adjusting formatting
The diff shows:
1. Updated metadata (revision date, translator, project URL, generator)
2. A translation string change for "calendar-month-year" (from empty to "calendar-month-year")
None of these changes involve:
- Input validation
- Output encoding
- Authentication/authorization logic
- Database query construction
- File operations
- Any other security-sensitive operations
**Conclusion:**
Vulnerability Existed: no
No security vulnerability identified - N/A - po/mn.po [Various lines]
[Old translation file content]
[Updated translation file content]
This diff represents routine translation updates without security implications.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ms.po 2025-10-27 16:59:44.620384975 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ms.po 2025-10-27 16:59:48.283618443 +0000@@ -4,16 +4,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-04-27 16:56+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"-"Language-Team: Malay <https://hosted.weblate.org/projects/phpmyadmin/4-8/ms/"-">\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Malay <https://hosted.weblate.org/projects/phpmyadmin/4-9/ms/>"+"\n" "Language: ms\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 3.6.1\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3168,8 +3168,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No vulnerabilities found in the provided diff. Explanation: The provided diff shows changes to a translation file (po/ms.po), which contains only user interface text translations. These types of files do not contain executable code and therefore cannot introduce or fix security vulnerabilities. The changes include: - Updated metadata (revision date, translator, generator version) - Translation updates for calendar-related strings - No code logic changes that could affect security Since translation files only contain human-readable strings for localization purposes, they do not pose security risks regardless of their content.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/nb.po 2025-10-27 16:59:44.620384975 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/nb.po 2025-10-27 16:59:48.283618443 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-08-27 18:34+0000\n"-"Last-Translator: hedberg90 <[email protected]>\n"+"PO-Revision-Date: 2022-03-30 05:06+0000\n"+"Last-Translator: Cathrine Egholm <[email protected]>\n" "Language-Team: Norwegian Bokmål <https://hosted.weblate.org/projects/" "phpmyadmin/4-9/nb_NO/>\n" "Language: nb\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.8.1-dev\n"+"X-Generator: Weblate 4.12-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -1107,10 +1107,8 @@ msgstr "Y-verdier" #: js/messages.php:142-#, fuzzy-#| msgid "Please enter the same value again" msgid "Please enter the SQL query first."-msgstr "Tast inn den samme verdien igjen"+msgstr "Tast inn SQL-forespørselen først." #: js/messages.php:145 msgid "The host name is empty!"@@ -2365,8 +2363,6 @@ msgstr "%d objekt(er) opprettet." #: js/messages.php:582-#, fuzzy-#| msgid "Column names" msgid "Column name" msgstr "Kolonnenavn" @@ -2711,12 +2707,11 @@ msgstr "Mislykket sikkerhetsnøkkelaktivering (%s)." #: js/messages.php:755-#, fuzzy, php-format-#| msgid "Table %s already exists!"+#, php-format msgctxt "" "The table already exists in the designer and can not be added once more." msgid "Table %s already exists!"-msgstr "Tabel %s eksisterer allerede!"+msgstr "Tabell %s eksisterer allerede!" #: js/messages.php:756 libraries/classes/InsertEdit.php:289 #: libraries/classes/Navigation/Nodes/NodeDatabaseChild.php:54@@ -2954,8 +2949,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "kalender-måned-år"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/nb.po Various lines [Old Code] Various translation strings in Norwegian Bokmål [Fixed Code] Updated translation strings and metadata Vulnerability Existed: no No specific vulnerability - N/A - po/nb.po Various lines [Old Code] PO-Revision-Date: 2021-08-27 18:34+0000 Last-Translator: hedberg90 <[email protected]> X-Generator: Weblate 4.8.1-dev [Fixed Code] PO-Revision-Date: 2022-03-30 05:06+0000 Last-Translator: Cathrine Egholm <[email protected]> X-Generator: Weblate 4.12-dev Note: This diff shows only translation file updates (po/nb.po) which contain localization strings for the Norwegian Bokmål language. There are no code changes that could introduce or fix security vulnerabilities. The changes include: - Updated translation metadata (dates, translator information) - Improved translation accuracy for several strings - Removal of fuzzy translation markers - No actual PHP code or security-related functionality was modified.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ne.po 2025-10-27 16:59:44.621385039 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ne.po 2025-10-27 16:59:48.284618507 +0000@@ -8,8 +8,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-01-25 11:21+0000\n"-"Last-Translator: Nabin Ghimire <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Nepali <https://hosted.weblate.org/projects/phpmyadmin/4-9/ne/" ">\n" "Language: ne\n"@@ -17,7 +17,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 3.11-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2851,8 +2851,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates. **Analysis:** 1. **Vulnerability Existed:** no No CWE identified - po/ne.po Lines 8-17, 2851-2852 Old Code: Various translation metadata and an empty translation string Fixed Code: Updated translation metadata and a filled translation string The diff shows: - Updated revision dates and translator information - Version bump for the translation tool (Weblate) - Filling in a previously empty translation string for "calendar-month-year" - Addition of a "fuzzy" flag indicating the translation may need review These are typical maintenance changes in translation files and do not represent security fixes. Translation files (.po) contain user interface strings and generally don't contain executable code that could introduce security vulnerabilities. If this diff was provided in the context of a security patch, the actual security fix likely exists in other files not shown in this diff.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/nl.po 2025-10-27 16:59:44.621385039 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/nl.po 2025-10-27 16:59:48.284618507 +0000@@ -4,7 +4,7 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-04-24 09:46+0000\n"+"PO-Revision-Date: 2023-01-28 03:53+0000\n" "Last-Translator: dingo thirteen <[email protected]>\n" "Language-Team: Dutch <https://hosted.weblate.org/projects/phpmyadmin/4-9/nl/>" "\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.7-dev\n"+"X-Generator: Weblate 4.16-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -127,7 +127,7 @@ #: templates/table/search/zoom_result_form.twig:35 #: templates/table/tracking/structure_snapshot_columns.twig:9 msgid "Null"-msgstr "Leeg"+msgstr "Nul" #: db_datadict.php:120 libraries/classes/CentralColumns.php:748 #: libraries/classes/CentralColumns.php:1428@@ -2983,7 +2983,7 @@ #. #: js/messages.php:899 msgid "calendar-month-year"-msgstr "kalender-maand-jaar"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -3118,8 +3118,8 @@ msgid "" "Invalid rule declaration on line %1$s, expected line %2$s of previous rule." msgstr ""-"Ongeldige regeldeclaratie op lijn %1$s, lijn %2$s van de vorige regel "-"verwacht."+"Ongeldige regeldeclaratie op regel %1$s, regel %2$s van de vorige "+"regeldeclaratie verwacht." #: libraries/classes/Advisor.php:567 #, php-format@@ -10942,12 +10942,12 @@ #: libraries/classes/Rte/Events.php:511 libraries/classes/Rte/Routines.php:1046 #: libraries/classes/Rte/Triggers.php:399 templates/view_create.twig:45 msgid "Definer"-msgstr "Naam"+msgstr "DEFINER" #: libraries/classes/Rte/Events.php:555 libraries/classes/Rte/Routines.php:1127 #: libraries/classes/Rte/Triggers.php:438 msgid "The definer must be in the \"username@hostname\" format!"-msgstr "De naam moet het formaat \"gebruikersnaam@computernaam\" hebben!"+msgstr "DEFINER moet het formaat \"gebruikersnaam@computernaam\" hebben!" #: libraries/classes/Rte/Events.php:562 msgid "You must provide an event name!"@@ -16438,7 +16438,7 @@ #: templates/table/relation/common_form.twig:6 msgid "Foreign key constraints"-msgstr "Beperkingen voor vreemde sleutels"+msgstr "Externe sleutel beperkingen" #: templates/table/relation/common_form.twig:10 msgid "Actions"@@ -16467,7 +16467,7 @@ #: templates/table/relation/common_form.twig:24 msgid "Foreign key constraint"-msgstr "Vreemde sleutel"+msgstr "Externe sleutel beperking" #: templates/table/relation/common_form.twig:89 msgid "+ Add constraint"
Vulnerability Existed: no No specific vulnerability - N/A - po/nl.po Various lines [Old Code] Various translation strings in Dutch [Fixed Code] Updated translation strings in Dutch Vulnerability Existed: no No specific vulnerability - N/A - po/nl.po Header lines [Old Code] "PO-Revision-Date: 2021-04-24 09:46+0000\n" "X-Generator: Weblate 4.7-dev\n" [Fixed Code] "PO-Revision-Date: 2023-01-28 03:53+0000\n" "X-Generator: Weblate 4.16-dev\n" Note: This diff only contains updates to translation strings in a Dutch language file (.po). These changes are purely linguistic/translation improvements and do not affect the application's security. The modifications include: - Updating translation metadata (dates, generator version) - Correcting translation terms (e.g., "Leeg" to "Nul" for "Null") - Improving translation accuracy for technical terms like "Definer" and "Foreign key constraints" - Fixing translation formatting in long strings No code changes or security-related fixes are present in this translation file update.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/nn.po 2025-10-27 16:59:44.621385039 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/nn.po 2025-10-27 16:59:48.284618507 +0000@@ -8,8 +8,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-03-14 13:02+0000\n"-"Last-Translator: erikbs <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Norwegian Nynorsk <https://hosted.weblate.org/projects/" "phpmyadmin/4-9/nn/>\n" "Language: nn\n"@@ -17,7 +17,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.5.2-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2812,8 +2812,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates rather than security fixes. Vulnerability Existed: no No security vulnerabilities identified in this translation file update The diff shows: 1. Updated translation metadata (revision date, translator information) 2. Updated generator version 3. Minor translation changes including adding a fuzzy flag and filling in a translation string 4. No code logic changes that would address security vulnerabilities This is a standard update to the Norwegian Nynorsk (nn) translation file with no security implications.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/pa.po 2025-10-27 16:59:44.622385103 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/pa.po 2025-10-27 16:59:48.284618507 +0000@@ -8,8 +8,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-01-22 17:26+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Punjabi <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "pa/>\n" "Language: pa\n"@@ -17,7 +17,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.5-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2851,8 +2851,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates rather than security fixes. Vulnerability Existed: no No security vulnerabilities identified - N/A - po/pa.po Lines 8-17, 2851-2853 Old Code: Various translation metadata and an empty translation string Fixed Code: Updated translation metadata and a filled translation string The changes include: 1. Updated revision date and translator information 2. Updated generator version 3. Added a translation for "calendar-month-year" (previously empty) 4. Added a "fuzzy" flag to indicate the translation may need review These are typical localization file updates and don't represent security fixes.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/pl.po 2025-10-27 16:59:44.623385166 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/pl.po 2025-10-27 16:59:48.285618570 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2022-01-16 23:52+0000\n"-"Last-Translator: Kozioł Marcin <[email protected]>\n"+"PO-Revision-Date: 2022-09-04 23:40+0000\n"+"Last-Translator: William Desportes <[email protected]>\n" "Language-Team: Polish <https://hosted.weblate.org/projects/phpmyadmin/4-9/pl/" ">\n" "Language: pl\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 " "|| n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 4.10.1\n"+"X-Generator: Weblate 4.14.1-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2696,7 +2696,7 @@ #: js/messages.php:740 msgid "Replace table with prefix"-msgstr "Zastąp tabelę przedrostkiem"+msgstr "Zamień tabelę na prefiks" #: js/messages.php:741 templates/database/structure/check_all_tables.twig:28 msgid "Copy table with prefix"@@ -2975,8 +2975,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "kalendarz-miesiąc-rok"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -8317,7 +8318,7 @@ #, php-format msgid "%1$d row affected." msgid_plural "%1$d rows affected."-msgstr[0] "Zmodyfikowanych rekordów: %1$d."+msgstr[0] "Zmodyfikowano rekord: %1$d." msgstr[1] "Zmodyfikowanych rekordów: %1$d." msgstr[2] "Zmodyfikowanych rekordów: %1$d." @@ -9069,6 +9070,7 @@ #: libraries/classes/Operations.php:1594 #: templates/table/structure/display_structure.twig:182+#, fuzzy msgid "Truncate" msgstr "Truncate" @@ -15766,8 +15768,8 @@ #: templates/database/search/results.twig:56 msgid "<strong>Total:</strong> <em>%count%</em> match" msgid_plural "<strong>Total:</strong> <em>%count%</em> matches"-msgstr[0] "<strong>Ogółem:</strong> <em>%s</em> dopasowania"-msgstr[1] "<strong>Ogółem:</strong> <em>%s</em> dopasowania"+msgstr[0] "<strong>Ogółem:</strong> <em>%s</em> dopasowanie"+msgstr[1] "<strong>Ogółem:</strong> <em>%s</em> dopasowań" msgstr[2] "<strong>Ogółem:</strong> <em>%s</em> dopasowania" #: templates/columns_definitions/table_fields_definitions.twig:17
Vulnerability Existed: no No specific vulnerability - N/A - po/pl.po N/A [This is a translation file update with no security implications] [Updated Polish translations and metadata] Vulnerability Existed: no No specific vulnerability - N/A - po/pl.po N/A [Translation file changes only affect user interface text] [Modified Polish translations for better accuracy] Note: The provided diff shows changes to a translation file (po/pl.po) which contains only localized string translations for the Polish language interface. Translation files do not contain executable code and therefore cannot introduce or fix security vulnerabilities. The changes include: - Updated translation metadata (dates, translator information) - Modified Polish translations for various UI strings - Added fuzzy markers for some translations These are purely linguistic improvements with no security impact.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/pt.po 2025-10-27 16:59:44.623385166 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/pt.po 2025-10-27 16:59:48.285618570 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2022-02-01 15:55+0000\n"-"Last-Translator: Salvador Domingues <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Portuguese <https://hosted.weblate.org/projects/phpmyadmin/" "4-9/pt/>\n" "Language: pt\n"@@ -2975,7 +2975,7 @@ #. #: js/messages.php:899 msgid "calendar-month-year"-msgstr "Calendário-mês-ano"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No vulnerability - N/A - po/pt.po N/A [Old translation content] [Updated translation content] Explanation: This diff shows changes to a translation file (po/pt.po) which contains localized string translations for the Portuguese language pack. The changes are purely linguistic/translation updates: 1. Updated revision date and last translator metadata 2. Changed the translation of "calendar-month-year" from "Calendário-mês-ano" to keeping the English term "calendar-month-year" These changes don't involve any code execution, security mechanisms, or vulnerability fixes. They are routine translation updates that don't affect the security posture of the application.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/pt_BR.po 2025-10-27 16:59:44.623385166 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/pt_BR.po 2025-10-27 16:59:48.285618570 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-05-13 19:34+0000\n"-"Last-Translator: Michal Čihař <[email protected]>\n"+"PO-Revision-Date: 2022-09-30 18:54+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Portuguese (Brazil) <https://hosted.weblate.org/projects/" "phpmyadmin/4-9/pt_BR/>\n" "Language: pt_BR\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n > 1;\n"-"X-Generator: Weblate 4.7-dev\n"+"X-Generator: Weblate 4.14.1\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -6963,7 +6963,7 @@ #: libraries/classes/Database/Designer/Common.php:622 msgid "Error: Missing index on column(s)."-msgstr "Erro: Perda de Índice(s) de coluna(s)."+msgstr "Erro: Falta o Índice(s) de coluna(s)." #: libraries/classes/Database/Designer/Common.php:627 msgid "Error: Relational features are disabled!"@@ -7118,10 +7118,10 @@ "configuration setting for [em]$cfg['Servers'][%3$d]['SessionTimeZone'][/em]. " "phpMyAdmin is currently using the default time zone of the database server." msgstr ""-"Não é possível usar o fuso horário de \"%1$s\" para o servidor %2$d. Por "-"favor, verifique sua configuração em [em]$cfg['Servers'][%3$d]"-"['SessionTimeZone'][/em]. O phpMyAdmin está atualmente usando o fuso horário "-"padrão do servidor de banco de dados."+"Não foi possível usar o fuso horário \"%1$s\" para o servidor %2$d. Por "+"favor, verifique sua configuração em relação a "+"[em]$cfg['Servers'][%3$d]['SessionTimeZone'][/em]. O phpMyAdmin está "+"atualmente usando o fuso horário padrão do servidor de banco de dados." #: libraries/classes/DatabaseInterface.php:1550 msgid "Failed to set configured collation connection!"@@ -14463,7 +14463,7 @@ #. l10n: In case a SQL query did not pass a security check #: tbl_get_field.php:46 transformation_wrapper.php:69 msgid "There is an issue with your request."-msgstr "Existe um problema com a sua requisição."+msgstr "Há um problema com sua solicitação." #: tbl_replace.php:258 #, php-format@@ -14987,7 +14987,7 @@ #: templates/display/export/options_output_compression.twig:11 msgid "zipped"-msgstr "compactado"+msgstr "compactado com zip" #: templates/display/export/options_output_compression.twig:17 msgid "gzipped"
Vulnerability Existed: no No vulnerability identified - N/A - po/pt_BR.po (entire file) The changes are translation updates only, no security-related code modifications were made. Analysis: The provided diff shows changes to a translation file (pt_BR.po) for phpMyAdmin. The modifications include: - Updated translation metadata (revision date, translator, generator) - Minor text corrections and improvements in Portuguese translations - No actual code changes or security fixes are present in this localization file Since this is purely a language/translation file and contains no executable code, there are no security vulnerabilities to analyze in this diff.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ro.po 2025-10-27 16:59:44.624385230 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ro.po 2025-10-27 16:59:48.286618634 +0000@@ -4,7 +4,7 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2022-02-08 00:54+0000\n"+"PO-Revision-Date: 2023-01-28 03:53+0000\n" "Last-Translator: liviuconcioiu <[email protected]>\n" "Language-Team: Romanian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "ro/>\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n==1 ? 0 : (n==0 || (n%100 > 0 && n%100 < " "20)) ? 1 : 2;\n"-"X-Generator: Weblate 4.11-dev\n"+"X-Generator: Weblate 4.16-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3637,6 +3637,10 @@ "MySQL server is enabled by matching the IP or hostname of the MySQL server " "to the given regular expression." msgstr ""+"Restricționează serverele MySQL pe care le poate introduce utilizatorul "+"atunci când o conectare la un server MySQL arbitrar este activată prin "+"potrivirea IP-ului sau a numelui de gazdă al serverului MySQL cu expresia "+"regulată dată." #: libraries/classes/Config/Descriptions.php:72 msgid "Restrict login to MySQL server"@@ -3648,6 +3652,10 @@ "inside a frame, and is a potential [strong]security hole[/strong] allowing " "cross-frame scripting (XSS) attacks." msgstr ""+"Activarea acestui lucru permite unei pagini situate pe un alt domeniu să "+"apeleze phpMyAdmin în interiorul unui cadru și este o potențială [strong]"+"gaură de securitate[/strong] care permite atacuri de scripting încrucișat "+"(XSS)." #: libraries/classes/Config/Descriptions.php:80 msgid "Allow third party framing"@@ -5455,7 +5463,6 @@ "[kbd]pma__central_columns[/kbd]." #: libraries/classes/Config/Descriptions.php:1091-#, fuzzy msgid "" "You can use MySQL wildcard characters (% and _), escape them if you want to " "use their literal instances, i.e. use [kbd]'my\\_db'[/kbd] and not "
Vulnerability Existed: no No specific vulnerability - N/A - po/ro.po N/A [Old translation content] [Updated translation content] Vulnerability Existed: no No specific vulnerability - N/A - po/ro.po N/A [Old translation content] [Updated translation content] Vulnerability Existed: no No specific vulnerability - N/A - po/ro.po N/A [Missing translation strings] [Added translation strings] Vulnerability Existed: no No specific vulnerability - N/A - po/ro.po N/A [Fuzzy translation marker] [Removed fuzzy marker]
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ru.po 2025-10-27 16:59:44.624385230 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ru.po 2025-10-27 16:59:48.286618634 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-09-07 11:45+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-06-18 09:18+0000\n"+"Last-Translator: Максим <[email protected]>\n" "Language-Team: Russian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "ru/>\n" "Language: ru\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 4.3-dev\n"+"X-Generator: Weblate 4.13-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -1173,7 +1173,7 @@ #: js/messages.php:163 libraries/classes/Util.php:1351 #: libraries/classes/Util.php:1382 msgid "."-msgstr "."+msgstr "," #: js/messages.php:165 msgid "Connections / Processes"@@ -1291,7 +1291,7 @@ #: js/messages.php:205 libraries/classes/Server/Status/Monitor.php:225 #: libraries/classes/Util.php:1268 msgid "MiB"-msgstr "МБ"+msgstr "МиБ" #. l10n: shortcuts for Gigabyte #: js/messages.php:206 libraries/classes/Util.php:1270@@ -1353,7 +1353,7 @@ #: templates/database/designer/options_panel.twig:177 #: templates/privileges/privileges_summary.twig:30 msgid "None"-msgstr "Ниодного"+msgstr "Ни одного" #: js/messages.php:221 msgid "Resume monitor"@@ -14979,13 +14979,14 @@ #: templates/prefs_twofactor.twig:18 msgid "Two-factor authentication is available and configured for this account." msgstr ""-"Двухфакторная авторизация доступна и активирована для этой учетной записи."+"Двухфакторная аутентификация доступна и настроена для этой учетной записи." #: templates/prefs_twofactor.twig:20 msgid "" "Two-factor authentication is available, but not configured for this account." msgstr ""-"Двухфакторная авторизация доступна, но не настроена для этой учетной записи."+"Двухфакторная аутентификация доступна, но не настроена для этой учетной "+"записи." #: templates/prefs_twofactor.twig:24 msgid ""@@ -15060,7 +15061,7 @@ "Open the two-factor authentication app on your device to view your " "authentication code and verify your identity." msgstr ""-"Откройте приложение двухфакторной аутентификации, чтобы узнать код "+"Откройте приложение двухфакторной аутентификации, чтобы просмотреть код " "аутентификации и подтвердить свою личность." #: templates/database/tracking/untracked_tables.twig:1@@ -16155,7 +16156,7 @@ #: templates/login/twofactor/application_configure.twig:14 msgid "OTP url:"-msgstr "URL для OTP:"+msgstr "OTP адрес:" #: templates/login/twofactor/application_configure.twig:18 msgid "Secret/key:"
Vulnerability Existed: no No vulnerabilities found in translation file - po/ru.po No code changes detected No code changes detected Vulnerability Existed: no No vulnerabilities found in translation file - po/ru.po No code changes detected No code changes detected
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/si.po 2025-10-27 16:59:44.625385294 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/si.po 2025-10-27 16:59:48.286618634 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-05-29 06:33+0000\n"-"Last-Translator: HelaBasa <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Sinhala <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "si/>\n" "Language: si\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.7-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3053,8 +3053,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "දින දර්ශන-මාස-වසර"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
**Analysis of the Code Diff for Security Fixes:** The provided diff shows changes to a translation file (`po/si.po`). Translation files typically contain localized text strings and metadata, not executable code. Changes in these files are generally related to translation updates, metadata corrections, or formatting improvements. **Assessment of Each Change:** 1. **Metadata Update:** - Changed: `PO-Revision-Date`, `Last-Translator`, `X-Generator` - These are standard metadata fields in PO files and do not impact security. 2. **Translation String Change:** - Changed: The translation for "calendar-month-year" from Sinhala text back to English. - Added `#, fuzzy` flag indicating the translation might need review. - This is a translation correction/update and does not relate to security vulnerabilities. **Conclusion:** No security-related changes are present in this diff. The modifications are typical for translation file updates. **Final Answer:** ``` Vulnerability Existed: no No vulnerabilities found - Translation file update only ```
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/sk.po 2025-10-27 16:59:44.625385294 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/sk.po 2025-10-27 16:59:48.287618698 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-10-10 07:05+0000\n"-"Last-Translator: worm6666 <[email protected]>\n"+"PO-Revision-Date: 2022-10-23 06:07+0000\n"+"Last-Translator: mixeros <[email protected]>\n" "Language-Team: Slovak <https://hosted.weblate.org/projects/phpmyadmin/4-9/sk/" ">\n" "Language: sk\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"-"X-Generator: Weblate 4.9-dev\n"+"X-Generator: Weblate 4.14.2-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -127,7 +127,7 @@ #: templates/table/search/zoom_result_form.twig:35 #: templates/table/tracking/structure_snapshot_columns.twig:9 msgid "Null"-msgstr "Nulový"+msgstr "Prázdný" #: db_datadict.php:120 libraries/classes/CentralColumns.php:748 #: libraries/classes/CentralColumns.php:1428@@ -2932,8 +2932,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "kalendár-mesiac-rok"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -15644,8 +15645,6 @@ #: templates/table/tracking/report_table.twig:4 #: templates/table/tracking/structure_snapshot_columns.twig:5-#, fuzzy-#| msgid "#" msgctxt "Number" msgid "#" msgstr "#"@@ -16829,7 +16828,7 @@ #: libraries/advisory_rules_generic.txt:208 msgid "{tmp_table_size} and {max_heap_table_size} are not the same."-msgstr ""+msgstr "{tmp_table_size} a {max_heap_table_size} nie sú rovnaké." #: libraries/advisory_rules_generic.txt:209 msgid ""@@ -16842,7 +16841,7 @@ #: libraries/advisory_rules_generic.txt:210 #, php-format msgid "Current values are tmp_table_size: %s, max_heap_table_size: %s"-msgstr ""+msgstr "Aktuálne hodnoty sú tmp_table_size: %s, max_heap_table_size: %s" #: libraries/advisory_rules_generic.txt:212 msgid "Percentage of temp tables on disk"
Vulnerability Existed: no No vulnerability - N/A - po/sk.po N/A [No code change related to security] [No code change related to security]
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/sl.po 2025-10-27 16:59:44.626385357 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/sl.po 2025-10-27 16:59:48.287618698 +0000@@ -4,7 +4,7 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-10-13 17:38+0000\n"+"PO-Revision-Date: 2022-06-02 08:16+0000\n" "Last-Translator: Domen <[email protected]>\n" "Language-Team: Slovenian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "sl/>\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=4; plural=n%100==1 ? 0 : n%100==2 ? 1 : n%100==3 || n" "%100==4 ? 2 : 3;\n"-"X-Generator: Weblate 4.9-dev\n"+"X-Generator: Weblate 4.13-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -13944,7 +13944,7 @@ #: libraries/config.values.php:170 msgid "Custom - display all possible options to configure"-msgstr "Po meri - prikaži vse mogoče možnosti za konfiguriranje"+msgstr "Po meri - prikaži vse možnosti za konfiguriranje" #: libraries/config.values.php:172 msgid "Custom - like above, but without the quick/custom choice"@@ -15342,7 +15342,7 @@ #: templates/display/export/method.twig:17 msgid "Custom - display all possible options"-msgstr "Po meri - prikaži vse mogoče možnosti"+msgstr "Po meri - pokaži vse možnosti" #: templates/display/export/options_output_format.twig:3 msgid "File name template:"
Vulnerability Existed: no No vulnerability identified - N/A - po/sl.po N/A The changes are translation updates only The changes are translation updates only Vulnerability Existed: no No vulnerability identified - N/A - po/sl.po N/A Updated translation strings for Slovenian language Updated translation strings for Slovenian language Vulnerability Existed: no No vulnerability identified - N/A - po/sl.po N/A Metadata updates (revision date and generator version) Metadata updates (revision date and generator version)
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/sq.po 2025-10-27 16:59:44.626385357 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/sq.po 2025-10-27 16:59:48.287618698 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-06-17 22:46+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Albanian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "sq/>\n" "Language: sq\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.7\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3002,8 +3002,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "kalendar-muaj-vit"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided code diff, I cannot identify any security vulnerabilities. The changes appear to be routine translation file updates. Vulnerability Existed: no No security vulnerability identified - N/A - po/sq.po Various lines [Old translation content] [Updated translation content] Explanation: - The diff shows changes to a translation file (po/sq.po) which contains localized strings for the Albanian language - Changes include: - Updated revision date and translator information - Updated generator version - Minor translation adjustments (e.g., changing "kalendar-muaj-vit" to "calendar-month-year") - Translation files typically don't contain executable code and are not vectors for security vulnerabilities - No code logic changes, input validation, or security-related functionality modifications are present
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/sr.po 2025-10-27 16:59:44.626385357 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/sr.po 2025-10-27 16:59:48.287618698 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-10-02 17:56+0000\n"-"Last-Translator: Ненад Генералски <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Serbian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "sr/>\n" "Language: sr\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 3.9-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3264,8 +3264,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/sr.po N/A [Old translation file content] [Updated translation file content] Explanation: This diff shows changes to a translation file (po/sr.po) which contains localization strings. Translation files do not contain executable code and only store human-readable text for internationalization. The changes include: 1. Updated revision date and translator information 2. Updated generator version 3. Minor translation updates (like adding a fuzzy flag and filling in a previously empty translation) Since translation files are data files that are processed by gettext and don't contain executable code, they don't introduce security vulnerabilities. The changes are purely related to localization and metadata updates.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/[email protected] 2025-10-27 16:59:44.627385421 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/[email protected] 2025-10-27 16:59:48.288618762 +0000@@ -4,17 +4,17 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-01-22 22:05+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"+"PO-Revision-Date: 2022-12-13 20:50+0000\n"+"Last-Translator: Kristijan Fremen Velkovski <[email protected]>\n" "Language-Team: Serbian (latin) <https://hosted.weblate.org/projects/" "phpmyadmin/4-9/sr_Latn/>\n" "Language: sr@latin\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n"-"Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"-"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 3.11-dev\n"+"Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && "+"n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"+"X-Generator: Weblate 4.15-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -891,28 +891,20 @@ msgstr "Ovim ćete ISPRAZNITI kompletnu tabelu!" #: js/messages.php:52-#, fuzzy-#| msgid "Delete tracking data for this table" msgid "Delete tracking data for this table?"-msgstr "Obriši podatke o praćenju za ovu tabelu"+msgstr "Obriši podatke o praćenju za ovu tabelu?" #: js/messages.php:54-#, fuzzy-#| msgid "Delete tracking data for this table" msgid "Delete tracking data for these tables?"-msgstr "Obriši podatke o praćenju za ovu tabelu"+msgstr "Obriši podatke o praćenju za ovu tabelu?" #: js/messages.php:56-#, fuzzy-#| msgid "Delete tracking data for this table" msgid "Delete tracking data for this version?"-msgstr "Obriši podatke o praćenju za ovu tabelu"+msgstr "Obriši podatke o praćenju za ovu verziju?" #: js/messages.php:58-#, fuzzy-#| msgid "Delete tracking data for this table" msgid "Delete tracking data for these versions?"-msgstr "Obriši podatke o praćenju za ovu tabelu"+msgstr "Obriši podatke o praćenju za ove verzije?" #: js/messages.php:59 #, fuzzy@@ -3156,8 +3148,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "kalendar-mesec-godina"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. The changes appear to be translation updates and metadata changes in a language file. Vulnerability Existed: no No security vulnerabilities identified - N/A - po/[email protected] All lines The changes are translation updates and metadata modifications The changes update translation strings and file metadata Explanation: - This is a language/translation file (.po file) containing user interface translations - The changes include: - Updated translation dates and translator information - Modified plural forms definition (formatting change only) - Updated generator version - Translation improvements for various messages - Removal of "fuzzy" flags indicating translations were reviewed - No code logic changes are present in this diff - Language files typically don't contain security vulnerabilities as they only store text translations - The changes appear to be routine translation maintenance rather than security fixes
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/sv.po 2025-10-27 16:59:44.627385421 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/sv.po 2025-10-27 16:59:48.288618762 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-09-24 12:35+0000\n"-"Last-Translator: Edward wahnström <[email protected]>\n"+"PO-Revision-Date: 2022-05-03 16:53+0000\n"+"Last-Translator: Erik Fornander <[email protected]>\n" "Language-Team: Swedish <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "sv/>\n" "Language: sv\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.9-dev\n"+"X-Generator: Weblate 4.12.1\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2957,8 +2957,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "kalender-månad-år"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -15622,7 +15623,7 @@ #: templates/display/export/options_rows.twig:7 msgid "Dump some row(s)"-msgstr "Skippa några rader"+msgstr "Exportera några rader" #: templates/display/export/options_rows.twig:23 msgid "Row to begin at:"@@ -15630,7 +15631,7 @@ #: templates/display/export/options_rows.twig:32 msgid "Dump all rows"-msgstr "Ta bort alla rader"+msgstr "Exportera alla rader" #: templates/display/import/javascript.twig:12 msgid ""
Vulnerability Existed: no No specific vulnerability - N/A - po/sv.po N/A No old code with vulnerability No fixed code for vulnerability Explanation: The provided diff shows changes to a translation file (po/sv.po) for Swedish language strings. These changes are purely linguistic updates to improve translation accuracy (e.g., changing "Skippa några rader" to "Exportera några rader" and "Ta bort alla rader" to "Exportera alla rader" for export-related strings). There are no code changes that could introduce or fix security vulnerabilities. Translation file updates don't typically contain security fixes unless they address issues like XSS in translated strings, but in this case, the changes are simple text improvements without security implications.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ta.po 2025-10-27 16:59:44.627385421 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ta.po 2025-10-27 16:59:48.288618762 +0000@@ -7,8 +7,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2020-12-28 16:29+0000\n"-"Last-Translator: Senthil Nathan <[email protected]>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Tamil <https://hosted.weblate.org/projects/phpmyadmin/4-9/ta/>" "\n" "Language: ta\n"@@ -16,7 +16,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 4.4.1-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3028,8 +3028,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "நாள்காட்டி-மாதம்-ஆண்டு"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Based on the provided diff, I cannot identify any security vulnerabilities. This appears to be a standard translation file update with no security-related code changes. Vulnerability Existed: no No security vulnerabilities identified in this translation file update The changes shown are: 1. Updated translation metadata (revision date, translator name, generator version) 2. A translation string change from "நாள்காட்டி-மாதம்-ஆண்டு" to "calendar-month-year" with a fuzzy flag 3. No actual code logic changes that could introduce or fix security vulnerabilities Since this is a translation file (.po) containing only user interface strings, it doesn't contain executable code that could have security implications. The modifications are purely related to localization and do not affect the application's security posture.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/te.po 2025-10-27 16:59:44.628385485 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/te.po 2025-10-27 16:59:48.288618762 +0000@@ -7,16 +7,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2017-04-12 15:07+0000\n"-"Last-Translator: bhargavi sabbisetty <[email protected]>\n"-"Language-Team: Telugu <https://hosted.weblate.org/projects/phpmyadmin/master/"-"te/>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Telugu <https://hosted.weblate.org/projects/phpmyadmin/4-9/te/"+">\n" "Language: te\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 2.13\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3113,8 +3113,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/te.po Various lines Old Code: "PO-Revision-Date: 2017-04-12 15:07+0000\n" "Last-Translator: bhargavi sabbisetty <[email protected]>\n" "Language-Team: Telugu <https://hosted.weblate.org/projects/phpmyadmin/master/te/>\n" "X-Generator: Weblate 2.13\n" msgid "calendar-month-year" msgstr "" Fixed Code: "PO-Revision-Date: 2022-02-17 10:36+0000\n" "Last-Translator: Maurício Meneghini Fauth <[email protected]>\n" "Language-Team: Telugu <https://hosted.weblate.org/projects/phpmyadmin/4-9/te/>\n" "X-Generator: Weblate 4.11-dev\n" msgid "calendar-month-year" msgstr "calendar-month-year" This diff shows only translation file updates including: - Updated revision date and translator information - Changed project URL path from "master" to "4-9" - Updated Weblate generator version - Added a translation string for "calendar-month-year" These changes are related to localization and do not represent security fixes.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/th.po 2025-10-27 16:59:44.628385485 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/th.po 2025-10-27 16:59:48.289618825 +0000@@ -4,16 +4,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-11-30 11:04+0000\n"-"Last-Translator: AnawinWz <[email protected]>\n"-"Language-Team: Thai <https://hosted.weblate.org/projects/phpmyadmin/4-9/th/"-">\n"+"PO-Revision-Date: 2022-11-07 12:02+0000\n"+"Last-Translator: AefghThreenine <[email protected]>\n"+"Language-Team: Thai <https://hosted.weblate.org/projects/phpmyadmin/4-9/th/>"+"\n" "Language: th\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 3.10-dev\n"+"X-Generator: Weblate 4.14.2\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2884,8 +2884,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr "ปฎิทินแบบ เดือน/ปี"+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902@@ -7330,13 +7331,12 @@ #: libraries/classes/Display/Results.php:4573 #, php-format msgid "%1$d total, %2$d in query"-msgstr ""+msgstr "ทั้งหมด %1$d, %2$d ในคำค้น" #: libraries/classes/Display/Results.php:4578-#, fuzzy, php-format-#| msgid "total"+#, php-format msgid "%d total"-msgstr "ทั้งหมด"+msgstr "ทั้งหมด %d" #: libraries/classes/Display/Results.php:4590 libraries/classes/Sql.php:1435 #, php-format@@ -11320,10 +11320,8 @@ msgstr "" #: libraries/classes/SavedSearches.php:415-#, fuzzy-#| msgid "Error while moving uploaded file." msgid "Error while loading the search."-msgstr "ข้อผิดพลาดขณะเคลื่อนย้ายไฟล์อัพโหลด"+msgstr "ข้อผิดพลาดขณะโหลดการค้นหา" #: libraries/classes/Server/Privileges.php:222 server_privileges.php:120 msgid "No privileges."
Based on the provided diff content, I cannot identify any security vulnerabilities. The changes appear to be translation updates and metadata changes for the Thai language file.
Vulnerability Existed: no
No security vulnerability identified - N/A - po/th.po Entire file
[Old Code]
[Fixed Code]
Explanation:
- The diff shows changes to a translation file (po/th.po) containing Thai language translations
- Changes include:
- Updated metadata (revision date, translator, generator version)
- Translation corrections and updates
- No actual code logic changes that could introduce or fix security vulnerabilities
- Translation files typically don't contain executable code that could have security implications
- The changes are related to internationalization/localization improvements only
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/tk.po 2025-10-27 16:59:44.629385549 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/tk.po 2025-10-27 16:59:48.289618825 +0000@@ -8,16 +8,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-04-27 16:56+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"-"Language-Team: Turkmen <https://hosted.weblate.org/projects/phpmyadmin/4-8/"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Turkmen <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "tk/>\n" "Language: tk\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 3.6.1\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2849,8 +2849,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No vulnerability identified - N/A - po/tk.po Various lines [Old translation file content] [Updated translation file content] Explanation: This diff shows changes to a translation file (po/tk.po) which contains localization strings. Translation files do not contain executable code and only store human-readable text for internationalization. The changes include: - Updated revision date and translator information - Updated project URL path from "4-8" to "4-9" - Updated Weblate generator version - Added a translation for "calendar-month-year" string These are routine translation updates and do not represent security fixes. Translation files pose no security risk as they are only used for displaying localized text in the user interface.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/tt.po 2025-10-27 16:59:44.629385549 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/tt.po 2025-10-27 16:59:48.289618825 +0000@@ -4,16 +4,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2015-10-15 11:22+0200\n"-"Last-Translator: Michal Čihař <[email protected]>\n"-"Language-Team: Tatar <https://hosted.weblate.org/projects/phpmyadmin/master/"-"tt/>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Tatar <https://hosted.weblate.org/projects/phpmyadmin/4-9/tt/>"+"\n" "Language: tt\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 2.5-dev\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 #, fuzzy@@ -3237,8 +3237,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No vulnerability found - N/A - po/tt.po N/A No old code with security issues No fixed code with security fixes Explanation: This diff shows changes to a translation file (po/tt.po) which contains only localization/translation strings. Translation files do not contain executable code and therefore cannot introduce or fix security vulnerabilities. The changes are limited to metadata updates (dates, translators, generator versions) and translation string modifications, which are unrelated to security.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ug.po 2025-10-27 16:59:44.629385549 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ug.po 2025-10-27 16:59:48.290618889 +0000@@ -7,16 +7,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2018-06-08 04:43+0000\n"-"Last-Translator: ۋولقان <[email protected]>\n"-"Language-Team: Uyghur <https://hosted.weblate.org/projects/phpmyadmin/4-8/ug/"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Uyghur <https://hosted.weblate.org/projects/phpmyadmin/4-9/ug/" ">\n" "Language: ug\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 3.0\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3170,8 +3170,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No vulnerability identified - N/A - po/ug.po Various lines [Old translation file content] [Updated translation file content] Explanation: This diff shows changes to a translation file (.po) which contains localized strings for the Uyghur language. The changes include: 1. Updated metadata (revision date, translator, project version path) 2. Updated generator information 3. Added a translation for "calendar-month-year" string Translation files contain only user interface text translations and do not contain executable code. Changes to translation files do not typically introduce or fix security vulnerabilities, as they merely affect displayed text rather than program logic or security controls.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/uk.po 2025-10-27 16:59:44.630385612 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/uk.po 2025-10-27 16:59:48.290618889 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2022-01-15 12:52+0000\n"-"Last-Translator: Максим Крикуненко <[email protected]>\n"+"PO-Revision-Date: 2022-05-08 16:10+0000\n"+"Last-Translator: Vladyslav Anisimov <[email protected]>\n" "Language-Team: Ukrainian <https://hosted.weblate.org/projects/phpmyadmin/4-9/" "uk/>\n" "Language: uk\n"@@ -14,7 +14,7 @@ "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"-"X-Generator: Weblate 4.10.1\n"+"X-Generator: Weblate 4.12.1\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -860,7 +860,7 @@ "The $cfg['TempDir'] (%s) is not accessible. phpMyAdmin is not able to cache " "templates and will be slow because of this." msgstr ""-"$cfg['TempDir'] (%s) недоступний. phpMyAdmin не може кешувати шаблони "+"$cfg['TempDir'] (%s) недоступний. phpMyAdmin не може кешувати шаблони " "оскільки буде повільним через це." #: js/messages.php:42@@ -1858,7 +1858,7 @@ #: js/messages.php:398 #, php-format msgid "Delete the matches for the %s table?"-msgstr "Видалити співставлення для таблиці %s ?"+msgstr "Видалити співставлення для таблиці %s ?" #: js/messages.php:402 msgid "The definition of a stored function must contain a RETURN statement!"@@ -2260,7 +2260,7 @@ "those values directly if desired" msgstr "" "В MySQL додаткові значення, які неможливо вибрати через інтерфейс, при "-"необхідності введіть безпосередньо з клавіатури"+"необхідності введіть безпосередньо з клавіатури" #: js/messages.php:550 msgid ""@@ -3162,7 +3162,7 @@ "The configuration storage is not ready for the central list of columns " "feature." msgstr ""-"Сховище конфігурації не готове через елементи стовпців основного списку."+"Сховище конфігурації не готове через елементи стовпців основного списку." #: libraries/classes/CentralColumns.php:362 #, php-format@@ -3693,7 +3693,7 @@ "kbd] - allows newlines in columns." msgstr "" "Визначає, який тип редагування контролю повинен бути використаний для CHAR і "-"VARCHAR стовпців; [kbd]input[/kbd] - довжина тексту, [kbd]textarea[/kbd] - "+"VARCHAR стовпців; [kbd]input[/kbd] - довжина тексту, [kbd]textarea[/kbd] - " "дозволена кількість рядків в стовпцях." #: libraries/classes/Config/Descriptions.php:112@@ -3785,8 +3785,8 @@ "Whether a warning (\"Are your really sure…\") should be displayed when " "you're about to lose data." msgstr ""-"Чи попередження (\"Ви дійсно впевнені…\") повинно бути бути відображене коли "-"ви можете втратити дані."+"Чи попередження (\"Ви дійсно впевнені…\") повинно бути відображене коли ви "+"можете втратити дані." #: libraries/classes/Config/Descriptions.php:165 msgid "Confirm DROP queries"@@ -4717,7 +4717,7 @@ #: libraries/classes/Config/Descriptions.php:718 msgid "Define how long (in seconds) a login cookie is valid."-msgstr "Визначити, скільки часу (в секундах) дійсні cookie авторизації."+msgstr "Визначити, скільки часу (в секундах) дійсні cookie авторизації." #: libraries/classes/Config/Descriptions.php:720 msgid "Login cookie validity"@@ -6066,7 +6066,7 @@ "URL-адрес проксі-сервера, який будуть використовувати при добуванні " "інформації про останню версію PhpMyAdmin або при поданні звітів про помилки. " "Вам це потрібно, якщо сервер, на якому встановлений PhpMyAdmin не має "-"прямого доступу до Інтернету. Формат: «hostname:portnumber»."+"прямого доступу до Інтернету. Формат: «hostname:portnumber»." #: libraries/classes/Config/Descriptions.php:1417 msgid "Proxy url"@@ -6444,8 +6444,8 @@ "may cause random session invalidation (currently session.gc_maxlifetime is " "%5$d)." msgstr ""-"%1$sТермін придатності cookie входу%2$s перевищує %3$sssession."-"gc_maxlifetime%4$s і може викликати випадкові скидання сеансу (наразі "+"%1$sТермін придатності cookie входу%2$s перевищує %3$sssession."+"gc_maxlifetime%4$s і може викликати випадкові скидання сеансу (наразі " "session.gc_maxlifetime рівний %5$d)." #: libraries/classes/Config/ServerConfigChecks.php:442@@ -6465,7 +6465,7 @@ "0, %sLogin cookie validity%s must be set to a value less or equal to it." msgstr "" "При використанні [kbd]cookie[/kbd] перевірки автентичності і %sLogin cookie "-"store%s не 0, %sLogin cookie validity%s повинно бути встановлене на "+"store%s не 0, %sLogin cookie validity%s повинно бути встановлене на " "значення, менше або рівне йому." #: libraries/classes/Config/ServerConfigChecks.php:506@@ -7566,7 +7566,7 @@ "TABLE or when creating indexes with CREATE INDEX or ALTER TABLE." msgstr "" "Буфер, що виділяється при сортуванні індексів MyISAM під час виконання "-"команди REPAIR TABLE або під час створення індексів командою CREATE INDEX "+"команди REPAIR TABLE або під час створення індексів командою CREATE INDEX " "або ALTER TABLE." #: libraries/classes/Engines/Pbxt.php:30@@ -8341,7 +8341,7 @@ #: libraries/classes/MultSubmits.php:500 msgid "Do you really want to execute the following query?"-msgstr "Ви насправді хочете виконати даний запит?"+msgstr "Ви насправді хочете виконати даний запит?" #: libraries/classes/Navigation/Navigation.php:69 msgid "An error has occurred while loading the navigation display"@@ -8631,8 +8631,8 @@ "first_name and last_name gives full_name which is redundant." msgstr "" "У вас є група стовпців, які при об'єднанні дають наявний стовпець? "-"Наприклад, якщо у вас є first_name, last_name і full_name, то при об'єднані "-"first_name і last_name виходить, що full_name являється зайвим."+"Наприклад, якщо у вас є first_name, last_name і full_name, то при об'єднані "+"first_name і last_name виходить, що full_name являється зайвим." #: libraries/classes/Normalization.php:295 msgid ""@@ -8761,7 +8761,7 @@ #: libraries/classes/Normalization.php:505 #, php-format msgid "The second step of normalization is complete for table '%1$s'."-msgstr "Завершиться другий крок нормалізації для таблиці '%1$s'."+msgstr "Завершиться другий крок нормалізації для таблиці '%1$s'." #: libraries/classes/Normalization.php:545 #: libraries/classes/Normalization.php:695@@ -9781,7 +9781,7 @@ #: libraries/classes/Plugins/Import/ImportMediawiki.php:276 #, php-format msgid "Invalid format of mediawiki input on line: <br />%s."-msgstr "Неприпустимий формат вводу mediawiki в рядку: <br />%s."+msgstr "Неприпустимий формат вводу mediawiki в рядку: <br />%s." #: libraries/classes/Plugins/Import/ImportOds.php:78 msgid "Import percentages as proper decimals <i>(ex. 12.00% to .12)</i>"@@ -9939,7 +9939,7 @@ "TRUE, second for FALSE. Nonzero=true." msgstr "" "Перетворює значення Boolean на текст (за замовчуванням 'Т' та 'F'). Перший "-"варіант для TRUE, другий для FALSE. Ненульові = true."+"варіант для TRUE, другий для FALSE. Ненульові = true." #: libraries/classes/Plugins/Transformations/Abs/DateFormatTransformationsPlugin.php:30 msgid ""@@ -9995,10 +9995,10 @@ "ЛИШЕ LINUX: Запускає зовнішню програму і подає стовпцеві дані через " "стандартний ввід. Повертає стандартний вивід програми. Типовою програмою є " "Tidy, яка гарно друкує HTML код. З міркувань безпеки Вам потрібно самостійно "-"відредагувати файл libraries/classes/Plugins/Transformations//Abs/"+"відредагувати файл libraries/classes/Plugins/Transformations/Abs/" "ExternalTransformationsPlugin.php та вписати програми дозволені для запуску. " "У такому випадку, перша опція - кількість програм, які Ви бажаєте "-"використовувати. Друга - має бути порожньою з історичних причин. Третя "+"використовувати. Друга опція має бути порожньою з історичних причин. Третя " "опція, встановлена в 1, буде конвертувати вивід, використовуючи " "htmlspecialchars() (типово: 1). Четверта опція, встановлена в 1, " "запобігатиме перенесенню рядка і виведе усі дані одним рядком (типово: 1)."@@ -10011,8 +10011,8 @@ "directly to the definition in %s." msgstr "" "Ви використовуєте поле параметрів командного рядка зовнішнього перетворення, "-"яке застаріло з міркувань безпеки. Додайте всі параметри командного рядка "-"безпосередньо до визначення у %s."+"яке не підтримується з міркувань безпеки. Додайте всі параметри командного "+"рядка безпосередньо до визначення в %s." #: libraries/classes/Plugins/Transformations/Abs/FormattedTransformationsPlugin.php:28 msgid ""@@ -10281,7 +10281,7 @@ #: libraries/classes/Relation.php:184 msgid "Designer and creation of PDFs"-msgstr "Проєктувальник створення PDF-файлів"+msgstr "Проєктувальник створення PDF-файлів" #: libraries/classes/Relation.php:195 msgid "Displaying Column Comments"@@ -11036,8 +11036,8 @@ msgid "%d row affected by the last statement inside the procedure." msgid_plural "%d rows affected by the last statement inside the procedure." msgstr[0] "%d рядок залежить від останнього оператора всередині процедури."-msgstr[1] "%d рядки залежать від останнього оператора всередині процедури."-msgstr[2] "%d рядків залежать від останнього оператора всередині процедури."+msgstr[1] "%d рядки залежать від останнього оператора всередині процедури."+msgstr[2] "%d рядків залежать від останнього оператора всередині процедури." #: libraries/classes/Rte/Routines.php:1530 #: libraries/classes/Rte/Routines.php:1537@@ -11398,7 +11398,7 @@ #: libraries/classes/Server/Privileges.php:806 msgid "Requires that a valid X509 certificate issued by this CA be presented."-msgstr "Потрібно, що дійсний сертифікат X509, виданий CA був представлений."+msgstr "Потрібно, що дійсний сертифікат X509, виданий CA був представлений." #: libraries/classes/Server/Privileges.php:819 msgid "Requires that a valid X509 certificate with this subject be presented."@@ -11770,7 +11770,7 @@ msgstr "" "Обліковий запис користувача дозволяє наявне підключення будь-якому " "користувачеві з локального хоста. Це буде перешкоджати іншим користувачам "-"підключатися, якщо їх обліковий запис користувача дозволяє з'єднання з будь-"+"підключатися, якщо їх обліковий запис користувача дозволяє з'єднання з будь-" "якого (%) хоста." #: libraries/classes/Server/Privileges.php:4758@@ -12696,7 +12696,7 @@ "can be calculated as Key_reads/Key_read_requests." msgstr "" "Кількість фізичних читань індексного блоку з диска. Якщо Key_reads великий, "-"то значення key_buffer_size швидше за все замале. Коефіцієнт невдалих "+"то значення key_buffer_size швидше за все замале. Коефіцієнт невдалих " "звернень до кешу може бути обчислений як Key_reads/Key_read_requests." #: libraries/classes/Server/Status/Variables.php:619@@ -13073,7 +13073,7 @@ #: libraries/classes/Sql.php:941 #, php-format msgid "Using bookmark \"%s\" as default browse query."-msgstr "Як стандартний запит на огляд даних використовується закладка \"%s\"."+msgstr "Як стандартний запит на огляд даних використовується закладка \"%s\"." #: libraries/classes/Sql.php:1423 msgid "Showing as PHP code"@@ -13106,7 +13106,7 @@ #: libraries/classes/SqlQueryForm.php:140 #, php-format msgid "Run SQL query/queries on server “%s”"-msgstr "Запустити SQL запит/запити на сервері “%s”"+msgstr "Запустити SQL запит/запити на сервері “%s”" #: libraries/classes/SqlQueryForm.php:157 #, php-format@@ -13561,7 +13561,7 @@ "spaces to the specified length when stored" msgstr "" "Рядок фіксованої довжини (0-255, за замовчуванням 1), який завжди "-"доповнюється пробілами з правого боку до заданої довжини під час зберігання"+"доповнюється пробілами з правого боку до заданої довжини під час зберігання" #: libraries/classes/Types.php:297 #, php-format@@ -13627,7 +13627,7 @@ "A BLOB column with a maximum length of 255 (2^8 - 1) bytes, stored with a " "one-byte prefix indicating the length of the value" msgstr ""-"Сповпець BLOB з максимальною довжиною 255 (2^8 - 1) байтів, зберігається з "+"Сповпець BLOB з максимальною довжиною 255 (2^8 - 1) байтів, зберігається з " "однобайтовим префіксом, що вказує довжину значення" #: libraries/classes/Types.php:342@@ -13635,7 +13635,7 @@ "A BLOB column with a maximum length of 16,777,215 (2^24 - 1) bytes, stored " "with a three-byte prefix indicating the length of the value" msgstr ""-"Сповпець BLOB з максимальною довжиною 16,777,215 (2^24 - 1) байтів, "+"Сповпець BLOB з максимальною довжиною 16,777,215 (2^24 - 1) байтів, " "зберігається з трьох-байтовим префіксом, що вказує довжину значення" #: libraries/classes/Types.php:348@@ -13643,15 +13643,15 @@ "A BLOB column with a maximum length of 65,535 (2^16 - 1) bytes, stored with " "a two-byte prefix indicating the length of the value" msgstr ""-"Сповпець BLOB з максимальною довжиною 65,535 (2^16 - 1) байтів, "-"зберігається з двох-байтовим префіксом, що вказує довжину значення"+"Сповпець BLOB з максимальною довжиною 65,535 (2^16 - 1) байтів, зберігається "+"з двох-байтовим префіксом, що вказує довжину значення" #: libraries/classes/Types.php:353 msgid "" "A BLOB column with a maximum length of 4,294,967,295 or 4GiB (2^32 - 1) " "bytes, stored with a four-byte prefix indicating the length of the value" msgstr ""-"Сповпець BLOB з максимальною довжиною 4,294,967,295 чи 4GiB (2^32 - 1) "+"Сповпець BLOB з максимальною довжиною 4,294,967,295 чи 4GiB (2^32 - 1) " "байтів, зберігається з чотирьох-байтовим префіксом, що вказує довжину " "значення" @@ -14378,7 +14378,7 @@ #. l10n: In case a SQL query did not pass a security check #: tbl_get_field.php:46 transformation_wrapper.php:69 msgid "There is an issue with your request."-msgstr "Виникла проблема з Вашим запитом."+msgstr "Виникла проблема з вашим запитом." #: tbl_replace.php:258 #, php-format@@ -14400,7 +14400,7 @@ #: tbl_tracking.php:108 msgid "No versions selected."-msgstr "Немає вибраних версій."+msgstr "Немає вибраних версій." #: tbl_tracking.php:139 msgid "SQL statements executed."@@ -15401,7 +15401,7 @@ "[doc@faq3-11]FAQ 3.11[/doc]." msgstr "" "Може бути приблизним. Натисніть на номер, щоб отримати точний підрахунок. "-"Дивіться [doc@faq3-11]FAQ 3.11[/doc]."+"Дивіться [doc@faq3-11]розділ 3.11[/doc] ЧаПів." #: templates/database/structure/table_header.twig:38 #: templates/table/index_form.twig:118@@ -16133,7 +16133,7 @@ #: templates/login/twofactor/application_configure.twig:14 msgid "OTP url:"-msgstr "OTP url:"+msgstr "url для OTP:" #: templates/login/twofactor/application_configure.twig:18 msgid "Secret/key:"@@ -16534,7 +16534,7 @@ #: libraries/advisory_rules_generic.txt:96 msgid "slow_query_log is set to 'OFF'"-msgstr "значення long_query_time встановлено на 'OFF'"+msgstr "значення long_query_time встановлено на 'OFF'" #: libraries/advisory_rules_generic.txt:100 msgid "Release Series"@@ -16675,7 +16675,7 @@ "The query cache is enabled and the server receives %d queries per second. " "This rule fires if there is more than 100 queries per second." msgstr ""-"Кешування запитів увімкнено, і сервер отримує %d запитів в секунду. Це "+"Кешування запитів увімкнено, і сервер отримує %d запитів в секунду. Це " "правило спрацьовує, якщо є більш ніж 100 запитів в секунду." #: libraries/advisory_rules_generic.txt:154@@ -16756,7 +16756,7 @@ "columns being used in the join conditions will greatly speed up table joins." msgstr "" "Це означає сканування всієї таблиці при об'єднанні. Додавання індексів до "-"стовпців використаних в операторах об'єднання, значно підвищать швидкість "+"стовпців використаних в операторах об'єднання, значно підвищать швидкість " "об'єднання таблиці." #: libraries/advisory_rules_generic.txt:181@@ -16863,10 +16863,10 @@ "wish to increase the in-memory table limit you will have to increase the " "other value as well." msgstr ""-"Якщо ви навмисно змінили одну зі змінних: Для визначення визначення "-"максимального розміру пам'яті таблиць сервер використовує менше з двох "-"значень. Тому, якщо ви хочете збільшити межу пам'ять таблиці, потрібно також "-"збільшити і значення другої змінної."+"Якщо ви навмисно змінили одну зі змінних: Для визначення максимального "+"розміру пам'яті таблиць сервер використовує менше з двох значень. Тому, якщо "+"ви хочете збільшити межу пам'ять таблиці, потрібно також збільшити і "+"значення другої змінної." #: libraries/advisory_rules_generic.txt:210 #, php-format@@ -16942,7 +16942,7 @@ "less than 1 per hour" msgstr "" "Рівень тимчасових таблиць, що записуються на диск: %s, це значення має бути "-"меншим 1 на годину"+"меншим 1 на годину" #: libraries/advisory_rules_generic.txt:228 msgid "MyISAM key buffer size"@@ -17554,9 +17554,9 @@ "using this formula: (query_cache_size - qcache_free_memory) / " "qcache_queries_in_cache" msgstr ""-"Через сильну фрагментацію можливо (в подальшому) збільшення "+"Через сильну фрагментацію можливо (в подальшому) збільшення " "Qcache_lowmem_prunes. Це може бути викликано великою кількістю очищень "-"нижньої пам'яті кешу запитів через через занадто мале значення змінної "+"нижньої пам'яті кешу запитів через занадто мале значення змінної " "{query_cache_size}. Для безпосереднього але нетривалого виправлення ситуації " "можна очистити кеш запитів (при цьому можливо блокування кешу запитів на " "тривалий час). Також допоможе ретельно налаштування змінної "@@ -17572,7 +17572,7 @@ "that the query cache is an alternating pattern of free and used blocks. This " "value should be below 20%%." msgstr ""-"Кеш у наразі фрагментований на %s%%, 100%% фрагментація означає, що в кеші "+"Кеш у наразі фрагментований на %s%%, 100%% фрагментація означає, що в кеші " "запитів послідовно чергуються вільні і використовувані блоки. Це значення не " "повинно перевищувати 20%%."
Vulnerability Existed: no No specific vulnerability - N/A - po/uk.po N/A [Old Code] Various Ukrainian translation strings with extra spaces [Fixed Code] Ukrainian translation strings with corrected spacing Note: This diff only contains localization/translation updates for the Ukrainian language file. There are no code changes that would introduce or fix security vulnerabilities. The changes are purely linguistic improvements to remove unnecessary spaces in the translated text.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/ur.po 2025-10-27 16:59:44.630385612 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/ur.po 2025-10-27 16:59:48.290618889 +0000@@ -7,16 +7,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-04-27 16:56+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"-"Language-Team: Urdu <https://hosted.weblate.org/projects/phpmyadmin/4-8/ur/"-">\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Urdu <https://hosted.weblate.org/projects/phpmyadmin/4-9/ur/>"+"\n" "Language: ur\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=n != 1;\n"-"X-Generator: Weblate 3.6.1\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3175,8 +3175,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No security vulnerability identified - N/A - po/ur.po Various lines [Old translation file content] [Updated translation file content] Analysis: The diff shows changes to a translation file (ur.po) which contains localized strings for the Urdu language version of phpMyAdmin. The changes include: 1. Updated metadata (revision date, translator information, project version reference) 2. Updated generator information 3. Translation updates for specific strings These are routine translation file updates and do not contain any security-related code changes. Translation files (.po) contain only human-readable strings and metadata, not executable code that could introduce security vulnerabilities.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/uz.po 2025-10-27 16:59:44.630385612 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/uz.po 2025-10-27 16:59:48.291618953 +0000@@ -4,16 +4,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-04-27 16:56+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"-"Language-Team: Uzbek <https://hosted.weblate.org/projects/phpmyadmin/4-8/uz/"-">\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Uzbek <https://hosted.weblate.org/projects/phpmyadmin/4-9/uz/>"+"\n" "Language: uz\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=(n > 1);\n"-"X-Generator: Weblate 3.6.1\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -3348,8 +3348,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No vulnerabilities found - N/A - po/uz.po N/A N/A N/A Explanation: This diff shows changes to a translation file (po/uz.po) which contains only localization strings and metadata updates. Translation files do not contain executable code and therefore cannot introduce or fix security vulnerabilities. The changes include updated timestamps, translator information, and translation strings, none of which have security implications.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/[email protected] 2025-10-27 16:59:44.631385676 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/[email protected] 2025-10-27 16:59:48.291618953 +0000@@ -4,16 +4,16 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-04-27 16:56+0000\n"-"Last-Translator: William Desportes <[email protected]>\n"-"Language-Team: Uzbek (latin) <https://hosted.weblate.org/projects/"-"phpmyadmin/4-8/uz_Latn/>\n"+"PO-Revision-Date: 2022-02-17 10:36+0000\n"+"Last-Translator: Maurício Meneghini Fauth <[email protected]>\n"+"Language-Team: Uzbek (latin) <https://hosted.weblate.org/projects/phpmyadmin/"+"4-9/uz_Latn/>\n" "Language: uz@latin\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 3.6.1\n"+"X-Generator: Weblate 4.11-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 #, fuzzy@@ -3348,8 +3348,9 @@ #. * or "calendar-year-month". #. #: js/messages.php:899+#, fuzzy msgid "calendar-month-year"-msgstr ""+msgstr "calendar-month-year" #. l10n: Year suffix for calendar, "none" is empty. #: js/messages.php:902
Vulnerability Existed: no No specific vulnerability - N/A - po/[email protected] Various lines [Old translation file content] [Updated translation file content] Vulnerability Existed: no No specific vulnerability - N/A - po/[email protected] Lines 3348-3352 [Old Code] #: js/messages.php:899 msgid "calendar-month-year" msgstr "" [Fixed Code] #: js/messages.php:899 #, fuzzy msgid "calendar-month-year" msgstr "calendar-month-year" Explanation: This diff shows changes to a translation file (po/[email protected]) which contains localization strings. The changes include: 1. Updated metadata (version numbers, dates, translator information) 2. Added a translation for the "calendar-month-year" string 3. Added a "fuzzy" flag to indicate the translation needs review These are routine translation updates and do not represent security fixes. Translation files contain user interface strings and do not typically introduce or fix security vulnerabilities.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/zh_CN.po 2025-10-27 16:59:44.631385676 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/zh_CN.po 2025-10-27 16:59:48.291618953 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2021-03-12 07:02+0000\n"-"Last-Translator: popcorner <[email protected]>\n"+"PO-Revision-Date: 2022-08-15 07:16+0000\n"+"Last-Translator: yangyangdaji <[email protected]>\n" "Language-Team: Chinese (Simplified) <https://hosted.weblate.org/projects/" "phpmyadmin/4-9/zh_Hans/>\n" "Language: zh_CN\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 4.5.2-dev\n"+"X-Generator: Weblate 4.14-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -674,7 +674,7 @@ #: index.php:351 msgid "Server connection:"-msgstr "服务器连接:"+msgstr "服务器连接：" #: index.php:355 libraries/classes/Plugins/Export/ExportLatex.php:223 #: libraries/classes/Plugins/Export/ExportSql.php:705@@ -734,7 +734,7 @@ #: index.php:472 msgid "Contribute"-msgstr "贡献"+msgstr "提供贡献" #: index.php:479 msgid "Get support"@@ -742,11 +742,11 @@ #: index.php:486 msgid "List of changes"-msgstr "更新列表"+msgstr "变更清单" #: index.php:493 templates/server/plugins/section.twig:13 msgid "License"-msgstr "授权"+msgstr "许可证协议" #: index.php:513 msgid ""@@ -11008,7 +11008,7 @@ msgid "" "An account already exists with the same username but possibly a different " "hostname."-msgstr "已存在具有相同用户名但可能具有不同主机名的帐户。"+msgstr "已存在具有相同用户名但可能具有不同主机名的账户。" #: libraries/classes/Server/Privileges.php:1565 msgid "Host name:"@@ -11234,8 +11234,7 @@ "A user account allowing any user from localhost to connect is present. This " "will prevent other users from connecting if the host part of their account " "allows a connection from any (%) host."-msgstr ""-"存在允许来自localhost的任何用户连接的用户帐户。如果其帐户的主机部分允许来自任"+msgstr "存在允许来自localhost的任何用户连接的用户账户。如果其账户的主机部分允许来自任" "何（％）主机的连接，这将阻止其他用户连接。" #: libraries/classes/Server/Privileges.php:4758@@ -13161,19 +13160,19 @@ #: libraries/classes/Util.php:3861 msgid "SSL is not being used"-msgstr "SSL未被使用"+msgstr "SSL 未被使用" #: libraries/classes/Util.php:3866 msgid "SSL is used with disabled verification"-msgstr "SSL在禁用验证的状态下使用"+msgstr "SSL 在禁用验证的状态下使用" #: libraries/classes/Util.php:3868 msgid "SSL is used without certification authority"-msgstr "SSL在没有证书颁发机构的情况下使用"+msgstr "SSL 在没有证书颁发机构的情况下使用" #: libraries/classes/Util.php:3871 msgid "SSL is used"-msgstr "已使用SSL"+msgstr "已使用 SSL" #: libraries/classes/Util.php:3992 msgid "Users"@@ -14253,12 +14252,12 @@ #: templates/prefs_twofactor.twig:18 msgid "Two-factor authentication is available and configured for this account."-msgstr "可以为此帐户配置双因素身份验证。"+msgstr "可以为此账户配置双因素身份验证。" #: templates/prefs_twofactor.twig:20 msgid "" "Two-factor authentication is available, but not configured for this account."-msgstr "可以使用双因素身份验证，但不为此帐户配置。"+msgstr "可以使用双因素身份验证，但不为此账户配置。" #: templates/prefs_twofactor.twig:24 msgid ""
Vulnerability Existed: no No specific vulnerability - N/A - po/zh_CN.po (entire file) [Old Code] The entire old translation file content [Fixed Code] The entire updated translation file content Explanation: This diff shows changes to a translation file (po/zh_CN.po) which contains only localization strings. Translation files do not contain executable code and only store human-readable text for internationalization. Changes in translation files typically involve: - Updated translation metadata (dates, translator information) - Improved translation accuracy - Text formatting changes (like changing ":" to "：" in Chinese punctuation) - Terminology updates (like changing "帐户" to "账户" for "account") Since translation files don't contain executable code logic, they don't introduce or fix security vulnerabilities. The changes appear to be routine translation improvements and maintenance updates.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
--- cache/phpmyadmin_RELEASE_4_9_10/po/zh_TW.po 2025-10-27 16:59:44.632385740 +0000+++ cache/phpmyadmin_RELEASE_4_9_11/po/zh_TW.po 2025-10-27 16:59:48.292619016 +0000@@ -4,8 +4,8 @@ "Project-Id-Version: phpMyAdmin 4.9.7-dev\n" "Report-Msgid-Bugs-To: [email protected]\n" "POT-Creation-Date: 2020-10-10 13:32-0300\n"-"PO-Revision-Date: 2019-09-18 09:24+0000\n"-"Last-Translator: Walter Cheuk <[email protected]>\n"+"PO-Revision-Date: 2022-03-30 05:06+0000\n"+"Last-Translator: Eotones <[email protected]>\n" "Language-Team: Chinese (Traditional) <https://hosted.weblate.org/projects/" "phpmyadmin/4-9/zh_Hant/>\n" "Language: zh_TW\n"@@ -13,7 +13,7 @@ "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=1; plural=0;\n"-"X-Generator: Weblate 3.9-dev\n"+"X-Generator: Weblate 4.12-dev\n" #: ajax.php:21 ajax.php:50 export.php:196 libraries/classes/Export.php:1095 msgid "Bad type!"@@ -2286,8 +2286,6 @@ msgstr "已建立 %d 個物件。" #: js/messages.php:582-#, fuzzy-#| msgid "Column names" msgid "Column name" msgstr "欄位名稱" @@ -2935,11 +2933,11 @@ #: js/messages.php:958 msgid "Please enter a value between {0} and {1} characters long"-msgstr "請輸入介於 {0} 與 {1} 個字元長度的值"+msgstr "請輸入介於 {0} 與 {1} 個字元長度的值" #: js/messages.php:963 msgid "Please enter a value between {0} and {1}"-msgstr "請輸入介於 {0} 與 {1} 間的值"+msgstr "請輸入介於 {0} 與 {1} 間的值" #: js/messages.php:968 msgid "Please enter a value less than or equal to {0}"@@ -3462,7 +3460,7 @@ #: libraries/classes/Charsets.php:689 msgctxt "Collation variant" msgid "no-pad"-msgstr ""+msgstr "無填充" #: libraries/classes/Config.php:1132 #, php-format@@ -6368,9 +6366,7 @@ #, php-format msgid "%1$d database has been dropped successfully." msgid_plural "%1$d databases have been dropped successfully."-msgstr[0] ""-"已成功刪除 %1$d 個資料庫。\n"-"已成功刪除 %1$d 個資料庫。"+msgstr[0] "已成功刪除 %1$d 個資料庫。" #: libraries/classes/Controllers/Server/ServerDatabasesController.php:343 #: libraries/classes/Import.php:122@@ -12287,17 +12283,15 @@ msgid "" "The number of joins without keys that check for key usage after each row. " "(If this is not 0, you should carefully check the indexes of your tables.)"-msgstr ""-"沒有使用索引但在每行之後檢查索引使用的多表查詢數 (如果該值不為 0，您應該仔細"-"檢查是否已經為資料表建立了適當的索引)。"+msgstr "沒有使用索引但在每行之後檢查索引使用的多表查詢數。 (如果該值不為 "+"0，您應該仔細檢查是否已經為資料表建立了適當的索引。)" #: libraries/classes/Server/Status/Variables.php:705 msgid "" "The number of joins that used ranges on the first table. (It's normally not " "critical even if this is big.)"-msgstr ""-"在第一個資料表上使用範圍查詢的多表查詢數 (即使該值很大，通常也不會有致命的影"-"響)。"+msgstr "在第一個資料表上使用範圍查詢的多表查詢數。 "+"(即使該值很大，通常也不會有致命的影響。)" #: libraries/classes/Server/Status/Variables.php:709 msgid "The number of joins that did a full scan of the first table."@@ -14142,10 +14136,9 @@ msgstr "檢視資料表結構" #: templates/database/designer/database_tables.twig:91-#, fuzzy, php-format-#| msgid "Select all"+#, php-format msgid "Select \"%s\""-msgstr "全選"+msgstr "選擇「%s」" #: templates/database/designer/database_tables.twig:126 #, php-format
Based on the provided diff content, I cannot identify any security vulnerabilities as this is a translation file update. **Analysis:** - This is a `.po` file (translation file) for Traditional Chinese (zh_TW) locale - The changes are purely translation updates and metadata changes - No actual code logic has been modified - Translation files don't typically contain security vulnerabilities themselves **Answer:** ``` Vulnerability Existed: no No security vulnerabilities found in translation file update ``` **Explanation:** The diff shows: 1. Updated translation metadata (dates, translator information) 2. Minor translation corrections (removing extra spaces, fixing plural forms) 3. Updated translation strings for better accuracy 4. No code changes that could introduce or fix security issues Since this is purely a localization file with no executable code changes, there are no security vulnerabilities to report.
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.