phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server
{
"versions": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.0.10.19"
},
{
"introduced": "4.4.0"
},
{
"last_affected": "4.4.15.10"
},
{
"introduced": "4.6.0"
},
{
"last_affected": "4.6.6"
}
]
}