michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-10-30 07:01:10 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
Files
2de2f590e32438aaec4b76bbaf439ce46690a595
webmin/mysql
History
Ilia Ross 0843de05cb Fix MySQL backup privilege boundary bypasses 
This PR fixes privilege boundary bypasses in MySQL database backups.

It restricts custom dump parameters and shared backup settings to users with unrestricted root backup access.

It also prevents database names, table names, and compatibility values from being interpreted as dump options.

The changes include focused tests and passed live regression testing with MySQL and MariaDB.
2026-10-16 03:08:07 +02:00
..
help
Fix binary log retention limit on MariaDB
2026-08-28 02:46:40 +02:00
images
Add MySQL binary log management
2026-08-28 02:16:50 +02:00
lang
Fix MySQL backup privilege boundary bypasses
2026-10-16 03:08:07 +02:00
acl_security.pl
Fix to use proper API for ACL pages
2026-04-23 22:07:13 +02:00
backup_config.pl
Keep old mysql login and password if the new ones don't work https://www.virtualmin.com/node/53331
2017-10-04 14:47:58 -07:00
backup_db.cgi
Fix MySQL backup privilege boundary bypasses
2026-10-16 03:08:07 +02:00
backup_form.cgi
Fix MySQL backup privilege boundary bypasses
2026-10-16 03:08:07 +02:00
backup.pl
Use undef instead of 0 https://github.com/webmin/webmin/pull/1513#discussion_r694106675
2021-08-23 19:09:16 +03:00
cgi_args.pl
…
CHANGELOG
Add MySQL binary log management
2026-08-28 02:16:50 +02:00
config
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config_info.pl
…
config-aix
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-AlmaLinux-7.0-ALL
Fix typo
2023-02-18 18:21:39 +02:00
config-alpine-linux
Improve alpine mysql/mariadb default support
2026-06-11 11:50:56 -04:00
config-Amazon-Linux-2-ALL
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-CentOS-Linux-7.0-ALL
Fix typo
2023-02-18 18:21:39 +02:00
config-CentOS-Stream-Linux-8.0-ALL
Fix typo
2023-02-18 18:21:39 +02:00
config-CloudLinux-8.0-ALL
Fix typo
2023-02-18 18:21:39 +02:00
config-cobalt-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-coherent-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-debian-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-debian-linux-2.2-9.0
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-debian-linux-10.0-12.0
Add support for MariaDB 15 in Debian 13
2025-09-04 00:56:45 +03:00
config-debian-linux-13.0-ALL
Add support for MariaDB 15 in Debian 13
2025-09-04 00:56:45 +03:00
config-freebsd
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-freebsd-8-ALL
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-gentoo-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-mandrake-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-mandrake-linux-10.1-ALL
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-msc-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-netbsd
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-open-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-openmamba-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-openSUSE-Linux-15.0-ALL
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-Oracle-Linux-8.0-ALL
Fix typo
2023-02-18 18:21:39 +02:00
config-pardus-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-Redhat-Enterprise-Linux-7.0-ALL
Fix typo
2023-02-18 18:21:39 +02:00
config-redhat-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-redhat-linux-7.0-23.0
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-redhat-linux-24.0
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-redhat-linux-25.0-ALL
Fix typo
2023-02-18 18:21:39 +02:00
config-Rocky-Linux-7.0-ALL
Fix typo
2023-02-18 18:21:39 +02:00
config-Scientific-Linux-7.0-ALL
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-slackware-linux-8.0-ALL
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-sol-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-solaris-9
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-solaris-10
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-solaris-11-ALL
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-suse-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-suse-linux-7.1-ALL
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-syno-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-trustix-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-turbo-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-Ubuntu-Linux-16.04-17.99
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config-Ubuntu-Linux-18.04-25.99
Fix to install correct MariaDB config on Ubuntu 26.04
2026-05-01 21:52:05 +02:00
config-Ubuntu-Linux-26.04-ALL
Fix to install correct MariaDB config on Ubuntu 26.04
2026-05-01 21:52:05 +02:00
config-united-linux
Add config option to connect in SSL mode
2023-01-21 21:41:59 -08:00
config.info
Add config option to force use of some authentication plugin
2023-07-12 16:55:03 -07:00
config.info.bg
charset is a function name and so cannot be translated https://sourceforge.net/p/webadmin/bugs/5518/
2021-11-17 19:53:42 -08:00
config.info.ca
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.cs
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.de
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.es
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.fi
Restore incorrectly transcoded configs
2020-04-09 18:52:05 +03:00
config.info.fr
charset is a function name and so cannot be translated https://sourceforge.net/p/webadmin/bugs/5518/
2021-11-17 19:53:42 -08:00
config.info.hu
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.it
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.ja
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.nl
…
config.info.no
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.pl
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.pt_BR
charset is a function name and so cannot be translated https://sourceforge.net/p/webadmin/bugs/5518/
2021-11-17 19:53:42 -08:00
config.info.ru
Fix most (or even all errors) in human-translated configs
2020-04-10 00:12:39 +03:00
config.info.sv
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.tr
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.uk
Fix most (or even all errors) in human-translated configs
2020-04-10 00:12:39 +03:00
config.info.zh
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.zh_TW
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
cpan_modules.pl
Add ability to use correct driver depending on the database
2025-12-16 13:56:27 +02:00
create_table.cgi
…
csv_form.cgi
…
csv.cgi
Fix to get safely using wrapper sub 2/2
2021-09-28 16:30:05 +03:00
defaultacl
…
delete_cprivs.cgi
…
delete_dbs.cgi
…
delete_fields.cgi
…
delete_hosts.cgi
…
delete_tprivs.cgi
…
delete_users.cgi
…
download.cgi
Fix query as the order matters
2025-07-22 13:48:45 +03:00
drop_dbase.cgi
…
drop_dbases.cgi
…
drop_table.cgi
…
drop_tables.cgi
…
edit_binlogs.cgi
Add shared server section lookup
2026-08-28 14:46:07 +02:00
edit_cnf.cgi
Add shared server section lookup
2026-08-28 14:46:07 +02:00
edit_cpriv.cgi
…
edit_db.cgi
Fix to display if a user is Virtualmin user
2023-12-21 16:06:45 +02:00
edit_dbase.cgi
Rename function to make it less ambiguous
2025-02-02 14:43:24 -08:00
edit_field.cgi
…
edit_host.cgi
…
edit_index.cgi
…
edit_manual.cgi
Fix MySQL manual editor ACL bypass
2026-10-02 14:16:59 +02:00
edit_ssl.cgi
Add support for modern (Ubuntu 26.04) MariaDB
2026-04-30 21:47:57 +02:00
edit_table.cgi
Fix HTML form nesting https://sourceforge.net/p/webadmin/bugs/5098/
2018-03-24 12:50:12 -07:00
edit_tpriv.cgi
Differentiate remote and local mysql versions
2016-12-24 22:33:26 -08:00
edit_user.cgi
Fix checking account lock status #2484
2025-05-29 16:59:31 +03:00
edit_view.cgi
…
exec_file.cgi
Fix to respect global file ACLs for server-local imports
2026-07-07 12:39:35 +02:00
exec_form.cgi
Add multi-statement SQL script support when executing inline script
2026-04-14 23:02:15 +02:00
exec.cgi
Add multi-statement SQL script support when executing inline script
2026-04-14 23:02:15 +02:00
flush_binlogs.cgi
Add MySQL binary log management
2026-08-28 02:16:50 +02:00
import.cgi
Fix to respect global file ACLs for server-local imports
2026-07-07 12:39:35 +02:00
index.cgi
Add MySQL binary log management
2026-08-28 02:16:50 +02:00
install_check.pl
Don't complain about missing my.cnf if mysql is remote
2018-06-02 12:34:04 -07:00
kill_procs.cgi
…
list_cprivs.cgi
…
list_dbs.cgi
Add ability to display permissions intelligently
2024-08-13 22:25:17 +03:00
list_hosts.cgi
…
list_procs.cgi
…
list_tprivs.cgi
…
list_users.cgi
Add ability to display permissions intelligently
2024-08-13 22:25:17 +03:00
list_vars.cgi
System variables use _, but command line variables use -
2025-10-12 21:47:40 -07:00
log_parser.pl
Add MySQL binary log management
2026-08-28 02:16:50 +02:00
login.cgi
Add ability to force reset lost admin password for MySQL
2020-11-29 18:07:39 +03:00
module.info
Extract some translations to their own files
2019-12-14 12:12:23 -08:00
module.info.ar
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ar.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.bg
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.bg.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ca
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.ca.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.cs
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.cs.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.da
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.da.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.de
Extract some translations to their own files
2019-12-14 12:12:23 -08:00
module.info.de.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.el
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.el.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.es
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.es.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.eu
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.eu.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fa
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fa.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fi
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fi.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fr
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fr.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.hr
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.hr.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.hu
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.hu.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.it
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.it.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ja
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ja.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ko
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ko.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ms
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ms.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.nl
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.nl.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.no
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.no.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pl
Update translations and include the new Polish translation
2024-11-16 14:03:39 +02:00
module.info.pl.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pt
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.pt_BR
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pt_BR.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pt.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ru
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ru.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.sk
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.sk.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.sv
Extract language-specific module descriptions into separate files
2018-02-04 15:49:39 -08:00
module.info.sv.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.tr
Complete the Turkish module.info descriptions
2026-08-30 14:41:10 +03:00
module.info.tr.auto
Complete the Turkish module.info descriptions
2026-08-30 14:41:10 +03:00
module.info.uk
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.uk.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.zh
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.zh_TW
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.zh_TW.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.zh.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
mysql-lib.pl
Fix MySQL backup privilege boundary bypasses
2026-10-16 03:08:07 +02:00
newdb_form.cgi
Include full version in msql_version, and actually do version comparisons properly
2019-02-18 16:44:21 -08:00
newdb.cgi
…
postinstall.pl
Small code cleanup
2023-08-14 23:02:35 -07:00
prefs.info
Add prefs info files
2021-02-28 21:14:24 +03:00
purge_binlogs.cgi
Add MySQL binary log management
2026-08-28 02:16:50 +02:00
restart.cgi
Actually check ACL for starting and stopping mysql
2026-08-03 10:35:30 -07:00
root_form.cgi
Add UI API to mask sensitive text unless specifically hovered
2025-06-18 16:53:55 +03:00
save_binlogs.cgi
Add shared server section lookup
2026-08-28 14:46:07 +02:00
save_cnf.cgi
Add shared server section lookup
2026-08-28 14:46:07 +02:00
save_cpriv.cgi
Fix MySQL save handlers with parameterized SQL deletes (#8)
2026-03-10 17:29:17 +02:00
save_db.cgi
Fix MySQL save handlers with parameterized SQL deletes (#8)
2026-03-10 17:29:17 +02:00
save_field.cgi
Better handle null timestamps https://github.com/webmin/webmin/issues/921#issuecomment-393014169
2018-05-29 21:21:37 -07:00
save_host.cgi
Fix MySQL save handlers with parameterized SQL deletes (#8)
2026-03-10 17:29:17 +02:00
save_index.cgi
…
save_manual.cgi
Fix MySQL manual editor ACL bypass
2026-10-02 14:16:59 +02:00
save_root.cgi
Add support for latest MySQL/MariaDB 1/2
2020-09-23 16:55:52 +03:00
save_ssl.cgi
Add support for modern (Ubuntu 26.04) MariaDB
2026-04-30 21:47:57 +02:00
save_sync.cgi
…
save_tpriv.cgi
Fix MySQL save handlers with parameterized SQL deletes (#8)
2026-03-10 17:29:17 +02:00
save_user.cgi
Fix MySQL save handlers with parameterized SQL deletes (#8)
2026-03-10 17:29:17 +02:00
save_vars.cgi
Fix MySQL save handlers with parameterized SQL deletes (#8)
2026-03-10 17:29:17 +02:00
save_view.cgi
…
search_form.cgi
Fix consistency in search criteria #2079
2024-01-17 12:54:53 +02:00
start.cgi
Actually check ACL for starting and stopping mysql
2026-08-03 10:35:30 -07:00
stop.cgi
Actually check ACL for starting and stopping mysql
2026-08-03 10:35:30 -07:00
syslog_logs.pl
Add support for modern (Ubuntu 26.04) MariaDB
2026-04-30 21:47:57 +02:00
table_form.cgi
…
useradmin_update.pl
No need for extra brackets
2020-10-11 13:47:05 -07:00
view_table.cgi
Fix download link in MySQL rows
2025-07-22 13:05:39 +03:00
view-lib.pl
…