CVE-2016-6612 in phpMyAdmin

Сводка

по MITRE

An issue was discovered in phpMyAdmin. A user can exploit the LOAD LOCAL INFILE functionality to expose files on the server to the database system. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Резервировать: 06.08.2016
• Раскрытие: 10.12.2016
• Модерация: принято
• Вход: VDB-94044
• CPE: готов
• CWE: CWE-200 (Подтверждённый)
• CVSS: 6.5 (NVD)
• EPSS: 0.01701
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Transportation, Pharma, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6612
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6612
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6612/