PT-2016-6651 · Phpmyadmin+1 · Phpmyadmin+1

Geeknik · Published 2016-07-03 · Updated 2024-06-15 · CVE-2016-5703

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.4.x through 4.4.15.6 phpMyAdmin versions 4.6.x through 4.6.2

Description The issue allows remote attackers to execute arbitrary SQL commands via a crafted database name that is mishandled in a central column query. This occurs due to a SQL injection vulnerability in the libraries/central columns.lib.php file.

Recommendations For phpMyAdmin versions 4.4.x through 4.4.15.6, update to version 4.4.15.7 or later. For phpMyAdmin versions 4.6.x through 4.6.2, update to version 4.6.3 or later.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

ALT-PU-2016-1758

CVE-2016-5703

MGASA-2016-0240

OPENSUSE-SU-2024:10054-1

Affected Products

Alt Linux

Phpmyadmin

References · 171

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpmyadmin_null_termination_exec.rb · Exploit
• 🔥 https://github.com/coffeehb/Some-PoC-oR-ExP/blob/master/PhpMyAdmin/phpmyadmin4.6.2_RCE.py · Exploit
• https://github.com/phpmyadmin/phpmyadmin/commit/ef6c66dca1b0cb0a1a482477938cfc859d2baee3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-5703 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5701 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5731 · Security Note
• https://errata.altlinux.org/ALT-PU-2016-1758 · Vendor Advisory
• https://phpmyadmin.net/security/PMASA-2016-19 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5730 · Security Note
• http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5703 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6621 · Security Note
• https://advisories.mageia.org/MGASA-2016-0240.html · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5705 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0240 · Vendor Advisory