PT-2016-6991 · Phpmyadmin+2 · Phpmyadmin+2

E3Amn2L · Published 2016-08-29 · Updated 2024-06-15 · CVE-2016-6615

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.6.x prior to 4.6.4 phpMyAdmin versions 4.4.x prior to 4.4.15.8

Description XSS issues were discovered in phpMyAdmin, affecting the navigation pane and database/table hiding feature, the Tracking feature, and the GIS visualization feature. An attacker can trigger an XSS attack using a specially-crafted database name or query.

Recommendations For phpMyAdmin versions 4.6.x prior to 4.6.4, update to version 4.6.4 or later. For phpMyAdmin versions 4.4.x prior to 4.4.15.8, update to version 4.4.15.8 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2016-2421

CVE-2016-6615

DLA-1415-1

MGASA-2016-0291

OPENSUSE-SU-2016_2168-1

OPENSUSE-SU-2024:10054-1

Affected Products

Alt Linux

Suse

Phpmyadmin

References · 258

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9847 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6609 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6624 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9862 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6623 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6606 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9855 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6614 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6610 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6616 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6619 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6630 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9857 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6612 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2016-6615 · Vendor Advisory