An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 02:56
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/bid/94117 - | |
References | () https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html - | |
References | () https://security.gentoo.org/glsa/201701-32 - | |
References | () https://www.phpmyadmin.net/security/PMASA-2016-34 - Patch, Vendor Advisory |
Information
Published : 2016-12-11 02:59
Updated : 2024-11-21 02:56
NVD link : CVE-2016-6611
Mitre link : CVE-2016-6611
CVE.ORG link : CVE-2016-6611
JSON object : View
Products Affected
phpmyadmin
- phpmyadmin
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')