Description
An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)
WordPress 7PK - Security Features Vulnerability (CVE-2014-9039)
Atlassian Jira Deserialization of Untrusted Data Vulnerability (CVE-2020-14172)
Oracle JRE CVE-2014-2401 Vulnerability (CVE-2014-2401)
Drupal Improper Input Validation Vulnerability (CVE-2019-6339)