CVEvulnerability

CVE-2016-6609

8.8 HIGH Published 2016-12-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-12-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-77

Description

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Affected configurations

• phpmyadmin phpmyadmin 4.4.0 • phpmyadmin phpmyadmin 4.4.1 • phpmyadmin phpmyadmin 4.4.1.1 • phpmyadmin phpmyadmin 4.4.2 • phpmyadmin phpmyadmin 4.4.3 • phpmyadmin phpmyadmin 4.4.4 • phpmyadmin phpmyadmin 4.4.5 • phpmyadmin phpmyadmin 4.4.6 • phpmyadmin phpmyadmin 4.4.6.1 • phpmyadmin phpmyadmin 4.4.7 • phpmyadmin phpmyadmin 4.4.8 • phpmyadmin phpmyadmin 4.4.9 • phpmyadmin phpmyadmin 4.4.10 • phpmyadmin phpmyadmin 4.4.11 • phpmyadmin phpmyadmin 4.4.12 • phpmyadmin phpmyadmin 4.4.13 • phpmyadmin phpmyadmin 4.4.13.1 • phpmyadmin phpmyadmin 4.4.14 • phpmyadmin phpmyadmin 4.4.14.1 • phpmyadmin phpmyadmin 4.4.15 • phpmyadmin phpmyadmin 4.4.15.1 • phpmyadmin phpmyadmin 4.4.15.2 • phpmyadmin phpmyadmin 4.4.15.3 • phpmyadmin phpmyadmin 4.4.15.4 • phpmyadmin phpmyadmin 4.4.15.5 • phpmyadmin phpmyadmin 4.4.15.6 • phpmyadmin phpmyadmin 4.4.15.7 • phpmyadmin phpmyadmin 4.0.0 • phpmyadmin phpmyadmin 4.0.1 • phpmyadmin phpmyadmin 4.0.2 • phpmyadmin phpmyadmin 4.0.3 • phpmyadmin phpmyadmin 4.0.4 • phpmyadmin phpmyadmin 4.0.4.1 • phpmyadmin phpmyadmin 4.0.4.2 • phpmyadmin phpmyadmin 4.0.5 • phpmyadmin phpmyadmin 4.0.6 • phpmyadmin phpmyadmin 4.0.7 • phpmyadmin phpmyadmin 4.0.8 • phpmyadmin phpmyadmin 4.0.9 • phpmyadmin phpmyadmin 4.0.10 • phpmyadmin phpmyadmin 4.0.10.1 • phpmyadmin phpmyadmin 4.0.10.2 • phpmyadmin phpmyadmin 4.0.10.3 • phpmyadmin phpmyadmin 4.0.10.4 • phpmyadmin phpmyadmin 4.0.10.5 • phpmyadmin phpmyadmin 4.0.10.6 • phpmyadmin phpmyadmin 4.0.10.7 • phpmyadmin phpmyadmin 4.0.10.8 • phpmyadmin phpmyadmin 4.0.10.9 • phpmyadmin phpmyadmin 4.0.10.10 • phpmyadmin phpmyadmin 4.0.10.11 • phpmyadmin phpmyadmin 4.0.10.12 • phpmyadmin phpmyadmin 4.0.10.13 • phpmyadmin phpmyadmin 4.0.10.14 • phpmyadmin phpmyadmin 4.0.10.15 • phpmyadmin phpmyadmin 4.0.10.16 • phpmyadmin phpmyadmin 4.6.0 • phpmyadmin phpmyadmin 4.6.1 • phpmyadmin phpmyadmin 4.6.2 • phpmyadmin phpmyadmin 4.6.3

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References