phpmyadmin/composer · Security
phpMyAdmin server-side request forgery (SSRF)
- GHSA ID
- GHSA-44vv-mm86-7cg6
- CVE ID
- CVE-2016-6621
- Severity
- high
- Published
- Updated
- CVSS
- 8.6 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
- CVSS v3
- 8.6 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.
CWEs
- CWE-918 · Server-Side Request Forgery (SSRF)