GHSA-wpww-hx7x-xfjhHighCVSS 8.8

phpMyAdmin PHP code injection

Published
May 14, 2022
Last Modified
April 24, 2024

🔗 CVE IDs covered (1)

CVE-2016-6609 →

📋 Description

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

🎯 Affected products3

  • composer/phpmyadmin/phpmyadmin:>= 4.6, < 4.6.4
  • composer/phpmyadmin/phpmyadmin:>= 4.4, < 4.4.15.8
  • composer/phpmyadmin/phpmyadmin:>= 4.0, < 4.0.10.17

🔗 References (6)