CVE-2016-6608
phpMyAdmin Cross-site Scripting (XSS)
6.1
MEDIUM
CVSS 3.1
EPSS 0.32%
Description
XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions (prior to 4.6.4) are affected.
How to fix CVE-2016-6608
To remediate CVE-2016-6608, upgrade the affected package to a fixed version below.
- Alpine/phpmyadmin—upgrade to 4.4.15.8-r0 or later
- —upgrade to 4:4.6.4+dfsg1-1 or later
- —upgrade to 4.6.4 or later
Is CVE-2016-6608 being exploited?
Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.
Affected packages (3)
- from 0, < 4.4.15.8-r0
- from 0, < 4:4.6.4+dfsg1-1
- >= 4.6, < 4.6.4
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |