CVE-2016-6613 in phpMyAdmininfo

Summary

An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which phpMyAdmin will then expose to the user. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

08/06/2016

Disclosure

12/10/2016

Entries

1: VDB-94045

CPE

ready

CVSS

5.3

EPSS

0.00411

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!