medium6.5
CVE-2016-6612
An issue was discovered in phpMyAdmin.
Impact
An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyadmin | Phpmyadmin | Versions 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/94113
- https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
- https://security.gentoo.org/glsa/201701-32
- https://www.phpmyadmin.net/security/PMASA-2016-35
- http://www.securityfocus.com/bid/94113
- https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html
- https://security.gentoo.org/glsa/201701-32
- https://www.phpmyadmin.net/security/PMASA-2016-35