{"id":"CVE-2016-6609","aliases":["ALPINE-CVE-2016-6609","DEBIAN-CVE-2016-6609","DLA-1415-1","DLA-626-1","EUVD-2022-5617","GHSA-wpww-hx7x-xfjh","MGASA-2016-0291","UBUNTU-CVE-2016-6609","USN-4843-1","openSUSE-SU-2024:10054-1"],"status":"published","title":"phpMyAdmin PHP code injection","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02299,"percentile":0.83413,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-77"],"published":"2016-08-31T15:32:33Z","modified":"2026-10-24T10:30:45Z","fixes":[{"ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","fixed_in":["4.6.4","4.4.15.8","4.0.10.17"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.2","package":"phpmyadmin","fixed_in":["4.4.15.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"phpmyadmin","fixed_in":["4:4.6.4+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"phpmyadmin","fixed_in":["4:4.6.4+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"phpmyadmin","fixed_in":["4:4.6.4+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"phpmyadmin","fixed_in":["4:4.0.10-1ubuntu0.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"phpmyadmin","fixed_in":["4:4.5.4.1-2ubuntu2.1+esm5"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6"},{"fixed":"4.6.4"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4"},{"fixed":"4.4.15.8"}]}]},{"source":"ghsa","ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"4.0.10.17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.2","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.15.8-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.4+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.2.12-2+deb8u3"}]}],"versions":["4:4.2.12-2","4:4.2.12-2+deb8u1","4:4.2.12-2+deb8u2"],"bundled":11},{"source":"osv","ecosystem":"Debian:7","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:3.4.11.1-2+deb7u6"}]}],"versions":["4:3.4.11.1-2","4:3.4.11.1-2+deb7u1","4:3.4.11.1-2+deb7u2","4:3.4.11.1-2+deb7u3","4:3.4.11.1-2+deb7u4","4:3.4.11.1-2+deb7u5"],"bundled":13},{"source":"osv","ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6"},{"fixed":"4.6.4"}]}]},{"source":"osv","ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4"},{"fixed":"4.4.15.8"}]}]},{"source":"osv","ecosystem":"Packagist","package":"phpmyadmin/phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"4.0.10.17"}]}],"versions":["4.0.0","4.0.1","4.0.10","4.0.10.1","4.0.10.2","4.0.10.3","4.0.10.4","4.0.10.5","4.0.10.6","4.0.10.7","4.0.10.8","4.0.10.9","4.0.2","4.0.3","4.0.4","4.0.4.1","4.0.4.2","4.0.5","4.0.6","4.0.7","4.0.8","4.0.9"]},{"source":"osv","ecosystem":"Mageia:5","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.15.8-1.mga5"}]}],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.0.10-1ubuntu0.1+esm3"}]}],"versions":["4:4.0.6-1","4:4.0.8-1","4:4.0.9-1","4:4.0.10-1","4:4.0.10-1ubuntu0.1","4:4.0.10-1ubuntu0.1+esm1","4:4.0.10-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.5.4.1-2ubuntu2.1+esm5"}]}],"versions":["4:4.4.13.1-1","4:4.5.0.2-2","4:4.5.1-1","4:4.5.1-2","4:4.5.1-3","4:4.5.2-1","4:4.5.2-2","4:4.5.3.1-1","4:4.5.4-1","4:4.5.4.1-2","4:4.5.4.1-2ubuntu1","4:4.5.4.1-2ubuntu2","4:4.5.4.1-2ubuntu2.1","4:4.5.4.1-2ubuntu2.1+esm2","4:4.5.4.1-2ubuntu2.1+esm3","4:4.5.4.1-2ubuntu2.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.0.10-1ubuntu0.1+esm4"}]}],"versions":["4:4.0.6-1","4:4.0.8-1","4:4.0.9-1","4:4.0.10-1","4:4.0.10-1ubuntu0.1","4:4.0.10-1ubuntu0.1+esm1","4:4.0.10-1ubuntu0.1+esm2","4:4.0.10-1ubuntu0.1+esm3"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.5.4.1-2ubuntu2.1+esm6"}]}],"versions":["4:4.4.13.1-1","4:4.5.0.2-2","4:4.5.1-1","4:4.5.1-2","4:4.5.1-3","4:4.5.2-1","4:4.5.2-2","4:4.5.3.1-1","4:4.5.4-1","4:4.5.4.1-2","4:4.5.4.1-2ubuntu1","4:4.5.4.1-2ubuntu2","4:4.5.4.1-2ubuntu2.1","4:4.5.4.1-2ubuntu2.1+esm2","4:4.5.4.1-2ubuntu2.1+esm3","4:4.5.4.1-2ubuntu2.1+esm4","4:4.5.4.1-2ubuntu2.1+esm5"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.6.6-5ubuntu0.5+esm1"}]}],"versions":["4:4.6.6-5","4:4.6.6-5ubuntu0.2+esm1","4:4.6.6-5ubuntu0.2+esm2","4:4.6.6-5ubuntu0.5"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"phpmyadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.9.5+dfsg1-2ubuntu0.1~esm1"}]}],"versions":["4:4.9.1+dfsg1-2","4:4.9.2+dfsg1-1","4:4.9.5+dfsg1-1ubuntu1","4:4.9.5+dfsg1-2"],"bundled":21},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"phpMyAdmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.5.2-1.1"}]}],"bundled":124}],"products":[{"vendor":"phpmyadmin","product":"phpmyadmin"}],"references":[{"url":"http://www.securityfocus.com/bid/94112","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-32","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00006.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201701-32","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6609","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wpww-hx7x-xfjh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-6609","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-6609","tags":["advisory"]},{"url":"https://github.com/phpmyadmin/composer","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2016-0291.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19204","tags":["report"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-29/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-30/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-32/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-33/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-34/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-35/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-36/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-37/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-38/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-39/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-41/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-42/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-43/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-45/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-46/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-47/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-48/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-49/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-50/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-51/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-52/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-53/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-54/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-55/","tags":["web"]},{"url":"https://www.phpmyadmin.net/security/PMASA-2016-56/","tags":["web"]},{"url":"https://www.phpmyadmin.net/files/4.4.15.6/","tags":["web"]},{"url":"https://www.phpmyadmin.net/news/2016/8/16/phpmyadmin-401017-44158-and-464-are-released/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-6609","tags":["report"]},{"url":"http://www.phpmyadmin.net/security/PMASA-2016-32/","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6609","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4843-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-6619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-6630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9849","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-9866","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18264","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-1000014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-1000015","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-7260","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12581","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19970","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-6798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19617","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-5504","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-26934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-26935","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9854","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9859","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9866","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-6609","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2016-12-11T02:00:00Z","modified":"2024-08-06T01:36:29.411Z","updated_at":"2026-11-02T14:33:34.815789Z"}],"euvd":[{"id":"EUVD-2022-5617","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2016-12-11T02:00:00Z","modified":"2024-08-06T01:36:29Z","updated_at":"2026-11-03T02:22:35.505212Z"}],"ghsa":[{"id":"GHSA-wpww-hx7x-xfjh","title":"phpMyAdmin PHP code injection","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2022-05-14T03:14:46Z","modified":"2024-04-24T18:11:52Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:37:45.47408Z"}],"nvd":[{"id":"CVE-2016-6609","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2016-12-11T02:59:14.28Z","modified":"2026-06-17T00:51:27.21Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:03:32.79141Z"}],"osv":[{"id":"ALPINE-CVE-2016-6609","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2016-12-11T02:59:14.28Z","modified":"2026-09-22T06:30:26.163343555Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2016-6609","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2016-12-11T02:59:14.28Z","modified":"2026-10-24T10:30:45.012846982Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"DEBIAN-CVE-2016-6609","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2016-12-11T02:59:14.28Z","modified":"2026-09-22T07:03:03.029288962Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"GHSA-wpww-hx7x-xfjh","title":"phpMyAdmin PHP code injection","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2022-05-14T03:14:46Z","modified":"2024-04-24T18:28:57.684112Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:46:58.767335Z"},{"id":"UBUNTU-CVE-2016-6609","description":"An issue was discovered in phpMyAdmin. A specially crafted database name could be used to run arbitrary PHP commands through the array export feature. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.","status":"published","published":"2016-12-11T02:59:00Z","modified":"2026-02-04T02:57:18.463535Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.642042Z"},{"id":"DLA-1415-1","title":"phpmyadmin - security update","status":"published","published":"2018-07-06T00:00:00Z","modified":"2026-03-09T01:00:41.294895Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-626-1","title":"phpmyadmin - security update","status":"published","published":"2016-09-17T00:00:00Z","modified":"2026-03-09T01:01:19.609648Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2016-0291","title":"Updated phpmyadmin packages fix security vulnerability","description":"In phpMyAdmin before 4.4.15.8, the decryption of the username/password is\nvulnerable to a padding oracle attack. The can allow an attacker who has\naccess to a user's browser cookie file to decrypt the username and\npassword. Also, the same initialization vector (IV) is used to hash the\nusername and password stored in the phpMyAdmin cookie. If a user has the\nsame password as their username, an attacker who examines the browser\ncookie can see that they are the same (CVE-2016-6606).\n\nIn phpMyAdmin before 4.4.15.8, multiple vulnerabilities have been\ndiscovered  in the following areas of phpMyAdmin: Zoom search, GIS editor,\nRelation view, several Transformations, XML export, MediaWiki export,\nDesigner, when the MySQL server is running with a specially-crafted\nlog_bin directive, Database tab, Replication feature, and Database search\n(CVE-2016-6607).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was found where a specially\ncrafted database name could be used to run arbitrary PHP commands through\nthe array export feature (CVE-2016-6609).\n\nIn phpMyAdmin before 4.4.15.8, a full path disclosure vulnerability was\ndiscovered where a user can trigger a particular error in the export\nmechanism to discover the full path of phpMyAdmin on the disk\n(CVE-2016-6610).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was reported where a\nspecially crafted database and/or table name can be used to trigger an SQL\ninjection attack through the export functionality (CVE-2016-6611).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered where a user\ncan exploit the LOAD LOCAL INFILE functionality to expose files on the\nserver to the database system (CVE-2016-6612).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was found where a user can\nspecially craft a symlink on disk, to a file which phpMyAdmin is permitted\nto read but the user is not, which phpMyAdmin will then expose to the user\n(CVE-2016-6613).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was reported with the %u\nusername replacement functionality of the SaveDir and UploadDir features.\nWhen the username substitution is configured, a specially-crafted user\nname can be used to circumvent restrictions to traverse the file system\n(CVE-2016-6614).\n\nIn phpMyAdmin before 4.4.15.8, multiple XSS vulnerabilities were found in\nthe following areas: Navigation pane and database/table hiding feature,\nthe \"Tracking\" feature, and GIS visualization feature (CVE-2016-6615).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered in the\nfollowing features where a user can execute an SQL injection attack\nagainst the account of the control user: User group Designer\n(CVE-2016-6616).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was found in the\ntransformation feature allowing a user to trigger a denial-of-service\n(DOS) attack against the server (CVE-2016-6618).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered in the user\ninterface preference feature where a user can execute an SQL injection\nattack against the account of the control user (CVE-2016-6619).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was reported where some\ndata is passed to the PHP unserialize() function without verification that\nit's valid serialized data. A malicious user may be able to manipulate the\nstored data in a way to result in code being loaded and executed\n(CVE-2016-6620).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered where an\nunauthenticated user is able to execute a denial-of-service (DOS) attack\nby forcing persistent connections when phpMyAdmin is running with\n$cfg['AllowArbitraryServer']=true; (CVE-2016-6622).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability has been reported where a\nmalicious authorized user can cause a denial-of-service (DOS) attack on a\nserver by passing large values to a loop (CVE-2016-6623).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered where, under\ncertain circumstances, it may be possible to circumvent the phpMyAdmin\nIP-based authentication rules. When phpMyAdmin is used with IPv6 in a\nproxy server environment, and the proxy server is in the allowed range but\nthe attacking computer is not allowed, this vulnerability can allow the\nattacking computer to connect despite the IP rules (CVE-2016-6624).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was reported where an\nattacker can determine whether a user is logged in to phpMyAdmin\n(CVE-2016-6625).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered where an\nattacker could redirect a user to a malicious web page (CVE-2016-6626).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered where an\nattacker can determine the phpMyAdmin host location through the file\nurl.php (CVE-2016-6627).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered where an\nattacker may be able to trigger a user to download a specially crafted\nmalicious SVG file (CVE-2016-6628).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was reported with the\n$cfg['ArbitraryServerRegexp'] configuration directive. An attacker could\nreuse certain cookie values in a way of bypassing the servers defined by\nArbitraryServerRegexp (CVE-2016-6629).\n\nIn phpMyAdmin before 4.4.15.8, an authenticated user can trigger a\ndenial-of-service (DOS) attack by entering a very long password at the\nchange password dialog (CVE-2016-6630).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered where a user\ncan execute a remote code execution attack against a server when\nphpMyAdmin is being run as a CGI application. Under certain server\nconfigurations, a user can pass a query string which is executed as a\ncommand-line argument by the file generator_plugin.sh (CVE-2016-6631).\n\nIn phpMyAdmin before 4.4.15.8, a flaw was discovered where, under certain\nconditions, phpMyAdmin may not delete temporary files during the import\nof ESRI files (CVE-2016-6632).\n\nIn phpMyAdmin before 4.4.15.8, a vulnerability was discovered where\nphpMyAdmin can be used to trigger a remote code execution attack against\ncertain PHP installations (CVE-2016-6633).\n","status":"published","published":"2016-08-31T15:32:33Z","modified":"2026-04-16T06:25:36.360359459Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10054-1","title":"phpMyAdmin-4.6.5.2-1.1 on GA media","description":"These are all security issues fixed in the phpMyAdmin-4.6.5.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:07:59.433224Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"USN-4843-1","title":"phpmyadmin vulnerabilities","description":"Javier Nieto and Andres Rojas discovered that phpMyAdmin incorrectly\nmanaged input in the form of passwords. An attacker could use this\nvulnerability to cause a denial-of-service (DoS). This issue only\naffected Ubuntu 14.04 ESM. (CVE-2014-9218)\n\nEmanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize\ninput in the form of database names in the PHP Array export feature.\nAn authenticated attacker could use this vulnerability to run arbitrary\nPHP commands. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n(CVE-2016-6609)\n\nEmanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize\ninput. An attacker could use this vulnerability to execute SQL injection\nattacks. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n(CVE-2016-6619)\n\nEmanuel Bronshtein discovered that phpMyadmin failed to properly sanitize\ninput. An authenticated attacker could use this vulnerability to cause a\ndenial-of-service (DoS). This issue only affected Ubuntu 14.04 ESM and\nUbuntu 16.04 ESM. (CVE-2016-6630)\n\nEmanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize\ninput. An attacker could use this vulnerability to bypass AllowRoot\nrestrictions and deny rules for usernames. This issue only affected Ubuntu\n14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-9849)\n\nEmanuel Bronshtein discovered that phpMyAdmin would allow sensitive\ninformation to be leaked when the argument separator in a URL was\nnot the default \u0026 value. An attacker could use this vulnerability to\nobtain the CSRF token of a user. This issue only affected Ubuntu\n14.04 ESM and Ubuntu 16.04 ESM. (CVE-2016-9866)\n\nIsaac Bennetch discovered that phpMyAdmin was incorrectly restricting\nuser access due to the behavior of the substr function on some PHP\nversions. An attacker could use this vulnerability to bypass login\nrestrictions established for users that have no password set. This\nissue only affected Ubuntu 14.04 ESM. This issue only affected Ubuntu\n14.04 ESM and Ubuntu 16.04 ESM. (CVE-2017-18264)\n\nEmanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize\ninput in the form of parameters sent during a table editing operation. An\nattacker could use this vulnerability to trigger an endless recursion\nand cause a denial-of-service (DoS). This issue only affected Ubuntu 14.04\nESM and Ubuntu 16.04 ESM. (CVE-2017-1000014)\n\nEmanuel Bronshtein discovered that phpMyAdmin failed to properly sanitize\ninput used to generate a web page. An authenticated attacker could use this\nvulnerability to execute CSS injection attacks. This issue only affected\nUbuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2017-1000015)\n\nIt was discovered that phpMyAdmin incorrectly handled certain input. An\nattacker could use this vulnerability to execute a cross-site scripting (XSS)\nattack via a crafted URL. This issue only affected Ubuntu 16.04 ESM.\n(CVE-2018-7260)\n\nIt was discovered phpMyAdmin incorrectly handled database names. An\nattacker could possibly use this to trigger a cross-site scripting\nattack. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM.\n(CVE-2018-12581)\n\nDaniel Le Gall discovered that phpMyAdmin would expose sensitive\ninformation to unauthorized actors due to an error in its transformation\nfeature. An authenticated attacker could use this vulnerability to leak\nthe contents of a local file. This issue only affected Ubuntu 14.04 ESM\nand Ubuntu 16.04 ESM. (CVE-2018-19968)\n\nIt was discovered that phpMyAdmin incorrectly handled user input. An\nattacker could possibly use this to perform a cross-site scripting attack.\nThis issue only affected Ubuntu 16.04 ESM. (CVE-2018-19970)\n\nIt was discovered that phpMyAdmin failed to properly sanitize input. An\nattacker could use this vulnerability to execute an SQL injection attack\nvia a specially crafted database name. This issue only affected Ubuntu\n16.04 ESM. (CVE-2019-11768)\n\nIt was discovered that phpMyAdmin incorrectly handled some requests. An\nattacker could possibly use this to perform a cross site request forgery\nattack. This issue only affected Ubuntu 16.04 ESM. (CVE-2019-12616)\n\nIt was discovered that phpMyAdmin incorrectly handled some requests. An\nattacker could possibly use this to perform a cross site request forgery\nattack. This issue only affected Ubuntu 14.04 ESM and Ubuntu 18.04 ESM.\n(CVE-2019-12922)\n\nIt was discovered that phpMyAdmin failed to properly sanitize input. An\nattacker could use this vulnerability to execute an SQL injection attack\nvia a specially crafted username. This issue only affected Ubuntu 16.04 ESM.\n(CVE-2019-6798)\n\nIt was discovered that phpMyAdmin did not properly sanitize certain input.\nAn attacker could use this vulnerability to possibly execute an HTML injection\nor a cross-site scripting (XSS) attack. This issue only affected Ubuntu 14.04\nESM and Ubuntu 16.04 ESM. (CVE-2019-19617)\n\nCSW Research Labs discovered that phpMyAdmin failed to properly sanitize\ninput.  An attacker could use this vulnerability to execute SQL injection\nattacks. This issue only affected Ubuntu 16.04 ESM. (CVE-2020-5504)\n\nGiwan Go and Yelang Lee discovered that phpMyAdmin was vulnerable to an\nXSS attack in the transformation feature. If a victim were to click on a\ncrafted link, an attacker could run malicious JavaScript on the victim's\nsystem. This issue only affected Ubuntu 20.04 ESM. (CVE-2020-26934)\n\nAndre Sá discovered that phpMyAdmin incorrectly handled certain SQL\nstatements in the search feature. A remote, authenticated attacker could\nuse this to inject malicious SQL into a query. This issue only affected\nUbuntu 20.04 ESM. (CVE-2020-26935)\n","status":"published","published":"2021-03-16T14:27:57Z","modified":"2026-06-29T13:48:33.558315723Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}