Description

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Remediation

References

CVE-2016-6611

Related Vulnerabilities

WordPress Plugin mb.YTPlayer for background videos Unspecified Vulnerability (1.7.2)

Drupal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2017-6928)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1635)

PHP Out-of-bounds Read Vulnerability (CVE-2020-7061)

WordPress Plugin ActiveHelper LiveHelp Live Chat Multiple Cross-Site Scripting Vulnerabilities (3.1.0)

Severity

High

Classification

CVE-2016-6611 CWE-138 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities