Description

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Remediation

References

CVE-2016-6612

Related Vulnerabilities

WordPress Plugin Relevanssi Premium-A Better Search Multiple Vulnerabilities (1.14.4)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-11628)

MySQL CVE-2020-2570 Vulnerability (CVE-2020-2570)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-0335)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20186)

Severity

Medium

Classification

CVE-2016-6612 CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities