NVD

Id
21301  
Name
CVE-2016-6617  
Description
An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4) are affected.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-12-10  
Modified Date
2016-12-23  
Seq
2016-6617  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
115533 21301 CVE-2016-6617 95044  View
115534 21301 CVE-2016-6617 https://www.phpmyadmin.net/security/PMASA-2016-40  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5429 JVNDB-2016-006202 phpMyAdmin のエクスポート機能における SQL インジェクションの脆弱性 phpMyAdmin のエクスポート機能には、SQL インジェクションの脆弱性が存在します。 CVE-2016-6617 93124 CVE-2016-6617 21301 6.8 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006202.html 2016-07-14 2016-12-15 View