Description

phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server

Remediation

References

CVE-2017-1000017

Related Vulnerabilities

WordPress Plugin Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, Aweber-MailOptin Security Bypass (1.2.49.0)

WordPress Plugin WP eCommerce Security Bypass (3.8.14.3)

WordPress Plugin Photo Gallery by Ays-Responsive Image Gallery SQL Injection (4.4.3)

WordPress Plugin Mass Delete Unused Tags Cross-Site Request Forgery (2.0.0)

phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-1927)

Severity

High

Classification

CVE-2017-1000017 CWE-918 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities