Lucene search
+L

6047 matches found

NVD
NVD
added 2016/12/11 2:59 a.m.15 views

CVE-2016-6612

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS6.3AI score0.01556EPSS
SaveExploits0References4
OSV
OSV
added 2016/12/11 2:59 a.m.8 views

DEBIAN-CVE-2016-6612

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS9.2AI score0.01556EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.7 views

CVE-2016-6612

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS7.8AI score
SaveExploits0References4
NVD
NVD
added 2016/12/11 2:59 a.m.20 views

CVE-2016-6611

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.1CVSS8.3AI score0.01416EPSS
SaveExploits0References4
OSV
OSV
added 2016/12/11 2:59 a.m.11 views

CVE-2016-6611

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.1CVSS9.7AI score
SaveExploits0References4
OSV
OSV
added 2016/12/11 2:59 a.m.6 views

DEBIAN-CVE-2016-6611

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.1CVSS9.6AI score0.01416EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.6 views

ALPINE-CVE-2016-6611

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.1CVSS8AI score0.01416EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.6 views

DEBIAN-CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

4.3CVSS9.1AI score0.01485EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.11 views

CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

4.3CVSS5.3AI score
SaveExploits0References3
NVD
NVD
added 2016/12/11 2:59 a.m.16 views

CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

4.3CVSS4.4AI score0.01485EPSS
SaveExploits0References3
OSV
OSV
added 2016/12/11 2:59 a.m.8 views

ALPINE-CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

4.3CVSS6.7AI score0.01485EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.7 views

DEBIAN-CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS8.7AI score0.01869EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.7 views

ALPINE-CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS7.3AI score0.01869EPSS
SaveExploits0References1
NVD
NVD
added 2016/12/11 2:59 a.m.26 views

CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS9.1AI score0.01869EPSS
SaveExploits0References4
OSV
OSV
added 2016/12/11 2:59 a.m.12 views

CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS9.2AI score
SaveExploits0References4
NVD
NVD
added 2016/12/11 2:59 a.m.25 views

CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6AI score0.01397EPSS
SaveExploits0References3
OSV
OSV
added 2016/12/11 2:59 a.m.10 views

DEBIAN-CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6.5AI score0.01397EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.12 views

CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6AI score
SaveExploits0References3
OSV
OSV
added 2016/12/11 2:59 a.m.6 views

ALPINE-CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6.6AI score0.01397EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.11 views

CVE-2016-6607

XSS issues were discovered in phpMyAdmin. This affects Zoom search specially crafted column content can be used to trigger an XSS attack; GIS editor certain fields in the graphical GIS editor are not properly escaped and can be used to trigger an XSS attack; Relation view; the following...

6.1CVSS9.1AI score
SaveExploits0References4
Rows per page
Query Builder