Debian/phpmyadmin: high 8.1
An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.
Action: Upgrade phpmyadmin to 4:4.6.4+dfsg1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4:4.6.4+dfsg1-1 | - |
Fixed versions
| 4:4.6.4+dfsg1-1 |
Sources
- osv: DEBIAN-CVE-2016-6617#Debian:14/phpmyadmin
- https://security-tracker.debian.org/tracker/CVE-2016-6617
published · modified · JSON