GHSA-44vv-mm86-7cg6HighCVSS 8.6

phpMyAdmin server-side request forgery (SSRF)

Published
May 14, 2022
Last Modified
April 21, 2025

🔗 CVE IDs covered (1)

CVE-2016-6621 →

📋 Description

The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.

🎯 Affected products3

  • composer/phpmyadmin/phpmyadmin:>= 4.6.0, < 4.6.6
  • composer/phpmyadmin/phpmyadmin:>= 4.4.0, < 4.4.15.10
  • composer/phpmyadmin/phpmyadmin:< 4.0.10.19

🔗 References (4)