Описание
An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 4:4.6.4+dfsg1-1 |
| bionic | not-affected | 4:4.6.4+dfsg1-1 |
| cosmic | not-affected | 4:4.6.4+dfsg1-1 |
| devel | not-affected | 4:4.6.4+dfsg1-1 |
| disco | not-affected | 4:4.6.4+dfsg1-1 |
| eoan | DNE | |
| esm-apps-legacy/xenial | released | 4:4.5.4.1-2ubuntu2.1+esm5 |
| esm-apps/bionic | not-affected | 4:4.6.4+dfsg1-1 |
| esm-apps/focal | not-affected | 4:4.6.4+dfsg1-1 |
| esm-apps/jammy | not-affected | 4:4.6.4+dfsg1-1 |
Показывать по
EPSS
6.5 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
An issue was discovered in phpMyAdmin. A specially crafted database na ...
ALT-PU-2016-2421: package `phpMyAdmin` update to version 4.6.5.2-alt1
EPSS
6.5 Medium
CVSS2
8.8 High
CVSS3