phpMyAdmin PHP code injection
An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6609US | high8.8 | — | ||
An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.securityfocus.com/bid/94112WEB
- https://github.com/phpmyadmin/composerPACKAGE
- https://lists.debian.org/debian-lts-announce/2018/07/msg00006.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2016-6609ADVISORY
- https://security.gentoo.org/glsa/201701-32WEB
- https://www.phpmyadmin.net/security/PMASA-2016-32WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan