SecuritySpace - CVE-2019-6799

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2019-6799

Description: An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.

Test IDs: 1.3.6.1.4.1.25623.1.0.891692 1.3.6.1.4.1.25623.1.0.112500 1.3.6.1.4.1.25623.1.0.112501

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2019-6799
BugTraq ID: 106736
http://www.securityfocus.com/bid/106736
https://lists.debian.org/debian-lts-announce/2019/02/msg00039.html

CVE ID:	CVE-2019-6799
Description:	An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls.
Test IDs:	1.3.6.1.4.1.25623.1.0.891692 1.3.6.1.4.1.25623.1.0.112500 1.3.6.1.4.1.25623.1.0.112501
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-6799 BugTraq ID: 106736 http://www.securityfocus.com/bid/106736 https://lists.debian.org/debian-lts-announce/2019/02/msg00039.html