CVE-2016-6609 | BDVDB-2026-79582 Detail

Description#

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/94112
https://www.phpmyadmin.net/security/PMASA-2016-32
https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html
https://security.gentoo.org/glsa/201701-32

Exploit#

No public exploit known

History#

Version 12016-12-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.