CVE

Id
93451  
CVE No.
CVE-2016-6631  
Status
Candidate  
Description
An issue was discovered in phpMyAdmin. A user can execute a remote code execution attack against a server when phpMyAdmin is being run as a CGI application. Under certain server configurations, a user can pass a query string which is executed as a command-line argument by the file generator_plugin.sh. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.  
Phase
Assigned (20160806)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793739 93451 CVE-2016-6631 CONFIRM:https://www.phpmyadmin.net/security/PMASA-2016-54  View
793740 93451 CVE-2016-6631 BID:92496  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4482 JVNDB-2016-005255 Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-6944 93451 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005255.html  View