high8.8
CVE-2016-6619
An issue was discovered in phpMyAdmin.
Impact
An issue was discovered in phpMyAdmin. In the user interface preference feature, a user can execute an SQL injection attack against the account of the control user. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyadmin | Phpmyadmin | Versions 4.4.0, 4.4.1, 4.4.1.1, 4.4.2, 4.4.3, 4.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95048
- https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html
- https://security.gentoo.org/glsa/201701-32
- https://www.phpmyadmin.net/security/PMASA-2016-42
- http://www.securityfocus.com/bid/95048
- https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html
- https://security.gentoo.org/glsa/201701-32
- https://www.phpmyadmin.net/security/PMASA-2016-42