PT-2016-7846 · Phpmyadmin+1 · Phpmyadmin+1

E3Amn2L · Published 2016-12-07 · Updated 2024-06-15 · CVE-2016-9853

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 4.4.x through 4.4.15.8 phpMyAdmin versions 4.6.x through 4.6.4

Description An issue in phpMyAdmin allows it to display a PHP error message containing the full path of the directory where phpMyAdmin is installed when certain scripts are called in an unexpected way. Additionally, during an execution timeout in the export functionality, errors with the full path are written to the export file.

Recommendations For phpMyAdmin versions 4.4.x through 4.4.15.8, update to version 4.4.15.9 or later. For phpMyAdmin versions 4.6.x through 4.6.4, update to version 4.6.5 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2016-2421

CVE-2016-9853

GHSA-RMMF-5XHH-GG27

MGASA-2016-0416

OPENSUSE-SU-2024:10054-1

Affected Products

Alt Linux

Phpmyadmin

References · 209

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9847 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6609 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6624 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9862 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6623 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0416 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6606 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9855 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6614 · Security Note
• https://advisories.mageia.org/MGASA-2016-0416.html · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6610 · Security Note
• https://phpmyadmin.net/security/PMASA-2016-63 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6616 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6619 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6630 · Security Note