Description

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Remediation

References

CVE-2016-6611

Related Vulnerabilities

IBMHttpServer Other Vulnerability (CVE-2006-3918)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.0.9)

WordPress Plugin Event Registration Multiple Vulnerabilities (6.02.03)

Apache HTTP Server Resource Management Errors Vulnerability (CVE-2016-8740)

WordPress Plugin Email Verification for WooCommerce Unspecified Vulnerability (1.8.1)

Severity

High

Classification

CVE-2016-6611 CWE-138 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities