CVE-2016-6608

Source
https://cve.org/CVERecord?id=CVE-2016-6608
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6608.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-6608
Aliases
Downstream
Related
Published
2016-12-11T02:59:12.970Z
Modified
2026-07-08T12:54:18.783358Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.

References

Affected packages

Git / github.com/phpmyadmin/phpmyadmin

Affected ranges

Type
GIT
Repo
https://github.com/phpmyadmin/phpmyadmin
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.0:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:phpmyadmin:phpmyadmin:4.6.3:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "4.6.0"
        },
        {
            "last_affected": "4.6.0"
        },
        {
            "introduced": "4.6.0-alpha1"
        },
        {
            "last_affected": "4.6.0-alpha1"
        },
        {
            "introduced": "4.6.0-rc1"
        },
        {
            "last_affected": "4.6.0-rc1"
        },
        {
            "introduced": "4.6.0-rc2"
        },
        {
            "last_affected": "4.6.0-rc2"
        },
        {
            "introduced": "4.6.1"
        },
        {
            "last_affected": "4.6.1"
        },
        {
            "introduced": "4.6.2"
        },
        {
            "last_affected": "4.6.2"
        },
        {
            "introduced": "4.6.3"
        },
        {
            "last_affected": "4.6.3"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*
4.6.0
4.6.0-alpha1
4.6.0-rc1
4.6.0-rc2
4.6.1
4.6.2
4.6.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6608.json"