CVE-2016-6608 — Cross-site Scripting in Phpmyadmin

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.5%
top 36.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
PhpmyadminDebian Phpmyadmin
Timeline
PublishedDec 11
Latest updateMay 17

Description

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages4 packages

▶debiandebian/phpmyadmin< phpmyadmin 4:4.6.4+dfsg1-1 (bookworm)
▶Packagistphpmyadmin/phpmyadmin4.6 — 4.6.4
▶Debianphpmyadmin/phpmyadmin< 4:4.6.4+dfsg1-1+3
▶NVDphpmyadmin/phpmyadmin4 versions+3

Patches

Patch: www.phpmyadmin.net ↗Patch: www.phpmyadmin.net ↗

🔴Vulnerability Details

3
GHSA
phpMyAdmin Cross-site Scripting (XSS)↗2022-05-17
▶
OSV
phpMyAdmin Cross-site Scripting (XSS)↗2022-05-17
▶
OSV
CVE-2016-6608: XSS issues were discovered in phpMyAdmin↗2016-12-11
▶

📋Vendor Advisories

1
Debian
CVE-2016-6608: phpmyadmin - XSS issues were discovered in phpMyAdmin. This affects the database privilege ch...↗2016
▶