Описание
An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4) are affected.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 4:4.6.4+dfsg1-1 |
| esm-apps-legacy/xenial | not-affected | |
| esm-apps/xenial | not-affected | |
| esm-infra-legacy/trusty | not-affected | |
| precise | not-affected | |
| trusty | not-affected | |
| trusty/esm | not-affected | |
| upstream | released | 4:4.6.4+dfsg1-1 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE |
Показывать по
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4) are affected.
An issue was discovered in phpMyAdmin. A specially crafted database an ...
An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4) are affected.
ALT-PU-2016-2421: package `phpMyAdmin` update to version 4.6.5.2-alt1
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3