phpmyadmin/composer · Security
phpMyAdmin Local file exposure
- GHSA ID
- GHSA-fcgm-62p3-f7cm
- CVE ID
- CVE-2016-6612
- Severity
- medium
- Published
- Updated
- CVSS
- 6.5 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS v3
- 6.5 · CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
CWEs
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
References
- https://nvd.nist.gov/vuln/detail/CVE-2016-6612 ↗
- https://lists.debian.org/debian-lts-announce/2019/06/msg00009.html ↗
- https://security.gentoo.org/glsa/201701-32 ↗
- https://www.phpmyadmin.net/security/PMASA-2016-35 ↗
- http://www.securityfocus.com/bid/94113 ↗
- https://github.com/advisories/GHSA-fcgm-62p3-f7cm ↗