Lucene search
K

6026 matches found

OSV
OSV
added 2016/12/11 2:59 a.m.3 views

CVE-2016-6612

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS7.8AI score
Exploits0References4
OSV
OSV
added 2016/12/11 2:59 a.m.2 views

DEBIAN-CVE-2016-6612

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS9.2AI score0.00324EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.3 views

ALPINE-CVE-2016-6612

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

6.5CVSS6.9AI score0.00324EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.1 views

DEBIAN-CVE-2016-6611

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.1CVSS9.6AI score0.0055EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.2 views

ALPINE-CVE-2016-6611

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.1CVSS8AI score0.0055EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.7 views

CVE-2016-6611

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.1CVSS9.7AI score
Exploits0References4
NVD
NVD
added 2016/12/11 2:59 a.m.16 views

CVE-2016-6611

An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.1CVSS8.3AI score0.0055EPSS
Exploits0References4
OSV
OSV
added 2016/12/11 2:59 a.m.1 views

DEBIAN-CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

4.3CVSS9.1AI score0.00321EPSS
Exploits0References1
NVD
NVD
added 2016/12/11 2:59 a.m.12 views

CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

4.3CVSS4.4AI score0.00321EPSS
Exploits0References3
OSV
OSV
added 2016/12/11 2:59 a.m.3 views

ALPINE-CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

4.3CVSS6.7AI score0.00321EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.6 views

CVE-2016-6610

A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a particular error in the export mechanism to discover the full path of phpMyAdmin on the disk. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are...

4.3CVSS5.3AI score
Exploits0References3
OSV
OSV
added 2016/12/11 2:59 a.m.2 views

ALPINE-CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS7.3AI score0.00411EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.6 views

CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS9.2AI score
Exploits0References4
NVD
NVD
added 2016/12/11 2:59 a.m.19 views

CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS9.1AI score0.00411EPSS
Exploits0References4
OSV
OSV
added 2016/12/11 2:59 a.m.1 views

DEBIAN-CVE-2016-6609

An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

8.8CVSS8.7AI score0.00411EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.1 views

DEBIAN-CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6.5AI score0.00317EPSS
Exploits0References1
NVD
NVD
added 2016/12/11 2:59 a.m.21 views

CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6AI score0.00317EPSS
Exploits0References3
OSV
OSV
added 2016/12/11 2:59 a.m.7 views

CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6AI score
Exploits0References3
OSV
OSV
added 2016/12/11 2:59 a.m.2 views

ALPINE-CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6.6AI score0.00317EPSS
Exploits0References1
OSV
OSV
added 2016/12/11 2:59 a.m.2 views

ALPINE-CVE-2016-6607

XSS issues were discovered in phpMyAdmin. This affects Zoom search specially crafted column content can be used to trigger an XSS attack; GIS editor certain fields in the graphical GIS editor are not properly escaped and can be used to trigger an XSS attack; Relation view; the following...

6.1CVSS6.4AI score0.00347EPSS
Exploits0References1
Rows per page
Query Builder