CVE-2016-6608 in phpMyAdmin

Summary

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 08/06/2016
• Disclosure: 12/10/2016
• Moderation: VulDB entry created
• Entries: 1: VDB-94040
• CPE: ready
• CWE: CWE-79 (Confirmed)
• CVSS: 6.1
• EPSS: 0.00452
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6608
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6608
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6608/