phpMyAdmin 4.0.4.2

Released 2013-07-28.

Welcome to phpMyAdmin 4.0.4.2, a security release.

4.0.4.2 (2013-07-28)
- [security] Fix stored XSS in Server status monitor, see PMASA-2013-9
- [security] Fix stored XSS in navigation panel logo link, see PMASA-2013-9
- [security] Fix self-XSS in setup, trusted proxies validation, see PMASA-2013-9
- [security] Fix full path disclosure, see PMASA-2013-12
- [security] Fix control user SQL injection in pmd_pdf.php, see PMASA-2013-15
- [security] Fix control user SQL injection in schema_export.php, see PMASA-2013-15
- [security] Fix self-XSS in schema export, see PMASA-2013-14
- [security] Fix unencoded json object, see PMASA-2013-11
- [security] Fix stored XSS in link transformation plugin, see PMASA-2013-13



Older version compatible with PHP 5.2 and MySQL 5. Does not support PHP 5.5 or newer. Was supported until April 1, 2017.

File Size Verification
phpMyAdmin-4.0.4.2-all-languages.7z 4.2 MB [SHA256]
phpMyAdmin-4.0.4.2-all-languages.tar.bz2 5.5 MB [SHA256]
phpMyAdmin-4.0.4.2-all-languages.tar.gz 7.0 MB [SHA256]
phpMyAdmin-4.0.4.2-all-languages.tar.xz 4.2 MB [SHA256]
phpMyAdmin-4.0.4.2-english.7z 2.8 MB [SHA256]
phpMyAdmin-4.0.4.2-english.tar.bz2 3.3 MB [SHA256]
phpMyAdmin-4.0.4.2-english.tar.gz 3.7 MB [SHA256]
phpMyAdmin-4.0.4.2-english.tar.xz 2.8 MB [SHA256]
phpMyAdmin-4.0.4.2-english.zip 4.1 MB [SHA256]

Since July 2015 all phpMyAdmin releases are cryptographically signed by the releasing developer. You should verify that the signature matches the archive you have downloaded. Verification instructions are placed in our documentation in the Verifying phpMyAdmin releases chapter.