PT-2016-6995

CVE-2016-6619

·

Published

2014-05-05

·

Updated

2024-06-15

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.0.x through 4.0.10.16 phpMyAdmin versions 4.4.x through 4.4.15.7 phpMyAdmin versions 4.6.x through 4.6.3
Description An issue was discovered in the user interface preference feature of phpMyAdmin, allowing a user to execute an SQL injection attack against the account of the control user.
Recommendations For versions 4.0.x through 4.0.10.16, update to version 4.0.10.17 or later. For versions 4.4.x through 4.4.15.7, update to version 4.4.15.8 or later. For versions 4.6.x through 4.6.3, update to version 4.6.4 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2014-1591
ALT-PU-2016-2421
DLA-1415-1
MGASA-2016-0291
OPENSUSE-SU-2016_2168-1
OPENSUSE-SU-2024:10054-1
USN-4843-1
Found an issue in the description? Have something to add? Feel free to write us 👾